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Disclaimer 


SmartRG does not assume any liability arising out of the application or use of any products, or software described herein. Neither does 
it convey any license under its patent rights nor patent rights of others. SmartRG further reserves the right to make changes to any 
products described herein without notice. This publication is subject to change without notice. 


Any trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective own- 
ers. 


Copyright and Trademarks 
Copyright © 2016 by SmartRG, Inc. 


The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated 
into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, 
manual, or otherwise, without the prior written permission of SmartRG, Inc. 


Published by SmartRG, Inc. All rights reserved. 


FCC Interference Statement 


This device complies with Part 15 of the Federal Communications Commission (FCC) Rules. Operation is subject to the following two con- 
ditions: 


e This device may not cause harmful interference. 


e This device must accept any interference received, including interference that may cause undesired operation. 


This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. 
These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment gen- 
erates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harm- 
ful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. 


If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment 
off and on, the user is encouraged to try to correct the interference by one or more of the following measures: 


e Reorient or relocate the receiving antenna. 
e Increase the separation between the equipment and receiver. 
e Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. 


e Consult the dealer or an experienced radio/TV technician for help. 


This Class B digital apparatus complies with Canadian ICES-003. 


Cet appareil numrique de la classe B est conforme A la norme NMB-003 du Canada. 


FCC Caution 
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Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate 


this equipment. 


IMPORTANT NOTE: FCC Radiation Exposure Statement: 


This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. 
This equipment should be installed an operated with a minimum distance of 20cm between the radiator and your body. 


This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. 


Safety Warnings 


For your safety, be sure to read and follow all warning notices and instructions. 
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To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. 


Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. 
ONLY qualified service personnel can service the device. Please contact your vendor for further information. 


Use ONLY the dedicated power supply for your device. Connect the power cord or power adapter to the correct supply voltage 
(110V AC in North America or 230V AC in Europe). 


Do NOT use the device if the power supply is damaged as it might cause electrocution. 
If the power supply is damaged, remove it from the power outlet. 
Do NOT attempt to repair the power supply. Contact your local vendor to order a new power supply. 


Place connecting cables carefully so that no one will step on them or stumble over them. Do NOT allow anything to rest on the 
power cord and do NOT locate the product where anyone can walk on the power cord. 


If you wall mount your device, make sure that no electrical, gas, or water pipes will be damaged. 

Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from lightning. 
Do NOT expose your device to dampness, dust, or corrosive liquids. 

Do NOT use this product near water, for example, in a wet basement or near a swimming pool. 

Make sure to connect the cables to the correct ports. 

Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. 

Do NOT store things on the device. 


Connect ONLY suitable accessories to the device. 
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Welcome! 


Thank you for purchasing this SmartRG product. 


SmartRG proudly brings you the best, most innovative broadband gateways available. SmartRG enables service providers to monitor, 
manage, and monetize the connected home through the design and production of reliable and highly interoperable hardware and soft- 
ware solutions. 


As an early innovator in TR-069 remote management technology, SmartRG offers the finest in managed broadband and home net- 
working solutions. Our products leverage various broadband access technologies and are outfitted with highly customizable software, 
meeting diverse service provider requirements. Based in the USA, SmartRG provides local, proactive software development and cus- 
tomer support. In the rapidly evolving broadband market, SmartRG helps service providers keep their businesses on the cutting edge 
through its laser-focused product line, leveraging the very latest in broadband access and home networking technologies. SmartRG solu- 
tions enable service providers to improve their bottom line by reducing service costs and increasing customer satisfaction. 


Learn more at www.SmartRG.com. 


Purpose & Scope 


The purpose and scope of this document is to provide SmartRG customers with installation, configuration and monitoring information 
for the SR300x and SR500x CPE platforms. 


Intended Audience 


The information in this document is intended for Network Architects, NOC Administrators, Field Service Technicians, and other net- 
working professionals responsible for deploying and managing broadband access networks. Readers of this manual are assumed to have 
a basic understanding of desktop computer operating systems, networking concepts and telecommunications. 


Getting Assistance 


Subscribers: If you require help with this product, please contact your service provider. 


Service providers: if you require help with this product, please open a support request. 
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GETTING FAMILIAR WITH YOUR GATEWAY 


This section contains a quick description of the Gateway's lights, ports, and buttons. SmartRG produces several models that vary slightly 
in capabilities (See Appendix B for details) but the basic scheme of lights, ports and buttons represented in this section exists on each 
model. 


LED Status Indicators 


Your SmartRG gateway has several indicator lights (LEDs) on its exterior. The number and type of ports vary from model to model. The 
following table illustrates a comprehensive set of LEDs to cover the indicators available on all models. 


POWER WAN LAN 1-4 WLAN WPS DSL1 or2 INTERNET 
ENOR.» -i P. E A EEEE 
rs DAE ayre augule andigatawayonlie A a tei nine ee bcm e. e.. 
No sync to DSL line @ O 
DSL sync in progress @ 18} 
Modem authenticatio n in progress ® e@ {6} 
DSL sync acquired and gateway online @ @ ® 
Gateway online and data transfer in progress @ @® ie} 
IP connec tion failure & O 
Connec tion dropped — attempting ® O O © 
re-authentication 
LAN device on network connected © e 22 
r E mone i T EN SEE EAR PETEERE REE EOE A 
aaa PO Lnetwork activity / data anster @  @/S 0/8 0/0 a OA 
l WPS Setup procedur e in progres s ® k ® 
_ Failure to find any partner with which to pair @ss—i—sSsSssss MY 
“Session overlap detected. Possible security risk @ woo 
a WPS Connection completed successfully @ =< © @ >=> 


@. on O:0ff {e}: Blinking / active 


Connections 
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Below is a generic representation of a SmartRG gateway, Your specific model may have more or fewer ports and controls across the 
back of the unit. Refer to the Quick Start Guide enclosed with your gateway for specifics regarding installation of your particular model. 


DSL LAN USB Power 


00 a) On/Off 


0 
LJ) 


The ports depicted in this example are described below. 


DSL 


The grey RJ12 port labeled DSL is specifically intended for connection to an internet provider via a DSL (Digital Subscriber Line) service. 
The center pair carries the first DSL line. For models like the SR550n equipped with two DSL ports and bonded DSL capability, the outer 
pair carries the second line. 


1 
DSL Line a Line 2 


WAN 


A stand-alone RJ45 port labeled WAN enables your SmartRG gateway to be hard-wired to another network device with a RJ45/Ethernet 
output such as a cable, fiber, or DSL modem. 


For models with a stand-alone, RJ45, WAN port and a DSL port, the WAN port can be re-purposed to function as an additional LAN port 
when your internet connection is via DSL. 


For instructions to enable this SmartPort™ feature, see the Ethernet Configuration section in this manual. 
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LAN 


The four (yellow) RJ45 ports across the back of your gateway labeled LAN1, LAN2, LAN3, LAN4 are the means to connect client devices 
such as computers and printers to your gateway. 


On some models, one of these four ports may be labeled as WAN indicating SmartPort™ support. SmartPort allows a LAN port to be re- 
purposed to function as an Ethernet WAN port (described above). When this port is serving as a LAN port, the corresponding LED on the 
face of the unit is labeled "WAN" 


For instructions to enable this SmartPort™ feature, see the Ethernet Configuration section in this manual. 


USB 


USB ports on SmartRG products currently provide +5 DC volts. 


POWER 


Use only the power supply included with your gateway. Intended for indoor use only. 


External Buttons 


Smart RG gateways provide push-button controls on the exterior for critical features. These buttons provide a convenient way to trigger 
WPS mode, toggle the WiFi radio on and off, or reset the gateway. Their presence and locations vary by model. 


The following describes each of these controls. 


WPS Button 


The WPS button triggers WPS (Wi-Fi Protected Setup™) mode. WPS is a standard means for creating a secure connection between your 
gateway and various wireless client devices. It is designed to simplify the pairing process between devices. 


If you have client devices that support WPS, use this button to automatically configure wireless security for your network. 
For specific instructions, refer to the Quick Start Guide included with your gateway. Also see the "Basic" section of this manual. 


WPS configures one client device at a time. You can repeat the steps as necessary for each additional WPS-compliant device you wish 
to connect. 


The location of the WPS button varies by model: 


e For SR360n models, the button is located on the top of the unit. 
e For SR510n, SR550n, SR515ac, and SR552n models, the button is located on the left side of the unit. 


For other models, an exterior button is not present. However, WPS is supported via the on-board software. 


For specific instructions, refer to the Quick Start Guide included with your gateway. 


WiFi or WLAN Button 
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The button labeled WiFi or WLAN (depending on model) toggles the WiFi radio on and off. The WLAN LED indicator on the gateway dis- 
plays the current state of the WiFi radio. 


The location of the WLAN button varies by model: 
e For SR360n models, the button is located on the top of the unit. 
e For SR510n, SR512nm, SR550n, and SR552n models, the button is located on the left side of the unit. 


For other models, an exterior button is not present. However, WiFi is supported via the on-board software. 
For specific instructions, refer to the Quick Start Guide included with your gateway. 


To activate the WiFi radio, press and hold the WiFi (WLAN) button for 3-5 seconds and then release. Expect a 1-3 second delay before 
the WiFi (WLAN) LED turns on. Repeat this step to deactivate the WiFi radio. 


Reset Button 

The Reset button is a small hole in the gateway's enclosure with the actual button mounted behind the surface. This style of push-button 
prevents the gateway from being inadvertently reset during handling. Reset must be actuated with a paper clip or similar implement. 
The location of the Reset button varies by model: 


e For SR5xx and SR630n models, the button is located on the rear of the unit. 
e For SR350n models, the button is located on the bottom of the unit. 
e For SR360n models, the button is located on the left side of the unit. 


This pin-hole sized reset button has three functions. The duration for which the button is held dictates which function is carried out. 


Hold Duration 


Less than 6 seconds : Performs a modem reset that is equivalent to the Reboot function in the gateway software. 


20 or more seconds : Changes the POWER LED to red and the gateway enters CFE mode which is a state associated with performing 
: firmware updates via Internet browser. 


Installing your SmartRG Gateway 


The following instructions explain all connection types offered for SmartRG gateways. For instructions specific to your gateway, follow 
the instructions in the Quick Start Guide included in the box. 


1. Attach your computer's RJ45 connection to any of the SmartRG gateway's LAN ports (1-4). 


2. Configure your computer's IP interface to acquire an IP address using DHCP. (For instructions on logging in to a SmartRG gate- 
way configured for "bridge mode"operation, see the Note below.) 


Logging in to your SmartRG Gateway’'s UI 


To manually configure the SmartRG Gateway, you can access the gateway's embedded web UI. 
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1. Open a browser and enter the gateway's default address (usually http://192.168.1.1; may also be http://192.168.0.1) in the 
address bar. 


2. For some models, the Network status page appears. If so, click the Manage gateway (advanced) link (usually located in the 
upper right corner). The Authentication Required dialog box appears. 


e09 Network Status x z 


e Cfi 192.168.1.1 » 
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Network status 


hen n à 

r ‘ Authentication Required Manner gateway (advanced) 
The server Mito: //192. 168.1. 1:80 requires a username and View log 
password. The server says: Broadband Router 
UserName admin 
Password seese 


-- Establishing WAN Ethernet connection - Please confirm your gateway is connected to 
the Internet -- 


3. For all models, enter the default username and password (usually: admin/admin) and click Login or OK to display the default 
landing page. For many models, this is the Device Info page. 


Note: The gateway's UI can be accessed via the WAN connection by entering the WAN IP address in your browser's address bar and 
entering the default username and password: support/support. WAN HTTP access control MUST be enabled to access the gateway's UI 
via the WAN connection. For more information, see the Management Access Control section. 


If your SmartRG gateway is configured for "bridge mode" (modem) operation, your PC will NOT be able to acquire an address via CPE 
DHCP. Instead, manually configure your PC's interface with an IP address on the default network (e.g., 192.168.1.100). 


The remainder of this guide is dedicated to a sequential walk-through of the gateway user interface. Screen captures are provided along 
with descriptions of the options available on the pictured page. Where applicable, valid values are provided. 


For in-depth "how-to" information for specific scenarios, look at the knowledge base found on our support web site. Access to this site is 
restricted to SmartRG customers and partners. Do not share links to this site with your subscribers. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Device Info 


There are several selections under Device Info in the left navigation bar. Each of them shows a different element of the gateway's 
setup, status or nature of its connection with the provider and also with LAN devices. Device Info pages are read-only. You cannot inter- 
act with or change the settings in this section. 


Summary 


When you log into the gateway interface, the Device Info is the first page to appear. This page displays details about the hardware and 
software associated with your gateway. In addition, the current status of the WAN connection (if present) is shown. 
Note: The following variations exist: 


e For the SR3xxn models, the Symmetric CPU Threads field and Aggregate Line Rate fields are not applicable. 


e For the SR505n and SR510n models, the Aggregate Line Rate fields are not applicable. The BO Traffic & B1 Traffic fields are 
unique to these two models and are not shown below. 


e For the SR515ac model, the Traffic Type and Aggregate Line Rate fields are not applicable. 
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Symmetric COU Tress: 
Suid Tmestamo: «= CEE 
Sotware Version: CEET 
Configuration Fite Origin: 


Bootloader (CPE) Version: FKE ETAT M 
OSL PHY and Driver Version 
Wiretess Driver Version: 6.30.163.23.cpe4.12L08.1 


Board 10: asst id 
Clear, 
A2pvbF039} 


Uptime: 00 OH 59M 13S 
a Base MAC Address: 00:23:63:5d:dd:39 


Serial Number: S2NADB4-0004464 


This information reflects the current status of your WAN connection. 


Traffic Type: jinactive | 
Aggregate Line Rate - Upstream (Kbps): 

Aggregate Line Rate - Downstream (Kbps) 

LAN iPv4 Address 


Default Gateway: Sa] 


WAN IPv4 Address 
Primary ONS Server: 
Secondary DNS Server: 
LAN IPV6 ULA Address: 


TE 
Default IPvé Gateway: | 


WAN 


On this page, you can view information about the connection between your ISP and your gateway. The WAN interface can be DSL or Eth- 
ernet and supports a number of Layer 2 and above configuration options (explained later in this document). Some features are sup- 
ported only on specific SmartRG models. Those exceptions are specified in this guide. 


In the left navigation bar, click Device Info > WAN. The following page appears. 
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forward thanking 


rt fa) nto one et tr RT| [2] 


The fields on this page are explained in the following table. 


Field Name Description 


Interface : The connection interface (Layer 2 interface) through which the gateway handles the traffic. 
The service description such ipoe_0.0.1, showing the type of WAN and its ID. 
“The service type. Options are PPPoE, PoE, and Bridge. = 
“The VLAN ID. Options are Disabled or 0-4094. 
“The state of PVE. Options are Enabled and Disabled = 


EET EPES AEE TEEPE LEEENA EENET EEEE EE EERE LEETE SEENTE FESE RTE 


(Not available on SR515ac gateways) The state of IGMP. Options are Enabled and Disabled. 


‘The state of NAT. Options are Enabled and Disabled. 


fe Sees se Geevs See Pee eee oS ee Ses eee eeee ie Sse se heat sete heehee eee eee Sete eee Sie eee eee = 


: The state of the Firewall. Options are Enabled and Disabled. 


‘ The status of the WAN connection. Options are Disconnected, Unconfigured, Connecting, and 
: Connected. 


IPv4 Address : The obtained IPv4 address. 


Se Reh ee ew eSeae sees = (Sseceseeedos Gels bed eeeteseeeceeseeeeew esas Ceawae ee eeteeee ie theses eeetes See Siecle = 


IPv6 Address : The obtained IPv6 address. 
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Statistics 


The Statistic pages provide network interface information for LAN, WAN Service, xTM and xDSL. All data is updated in 15-minute inter- 
vals. 


Notes: 


e For SR512nm models, statistics are also provided for MoCA connections. 


e For SR515ac models, statistics are also provided for the 2.4 Ghz and 5 Ghz wireless connections. 
LAN 


On this page, you can view the received and transmitted bytes, packets, errors and drops for each LAN interface configured on your gate- 
way. All local LAN Ethernet ports, Ethernet WAN ports and w10 (Wireless Interface) are included. 


In the left navigation bar, click Device Info > Statistics. The Statistics - LAN page appears where you can view detailed information 
about the status of your LAN. 


To reset the counters, click Reset Statistics near the bottom of the page. 
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Transmitted 
Bytes kts Errs Drops Bytes Pkts Errs Drops 


1735907 |7373 Jo |o__|s81198 [4051 Jo Jo | 


Reset Statistics 


EA Oe Oe eee 


Note: Only the SR360n and SR5xx models support the SmartPort feature where a LAN port can be re-purposed to function as a WAN 
port (as shown in the Interface column). 


The fields on this page are explained in the following table. 
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Field Name Description 


interface : Available LAN interfaces. Options are LAN1 - LAN4, WAN (if configured on your device), and WLO 
: (Wireless LAN-side interface), and 2.4 Ghz and 5 Ghz (SR515ac only). 


‘ Total number of dropped packets. 


WAN Service 


On this page, you can view the received and transmitted bytes, packets, errors and drops for each WAN interface for your SmartRG 
Gateway. All WAN interfaces configured for your gateway are included. 


In the left navigation bar, click Device Info > Statistics > WAN Service. The Statistics - WAN page appears where you can view detailed 
information about the status of your WAN. 


To reset the counters, click Reset Statistics near the bottom of the page. 
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Device Info Statistics -- WAN 
Summary 
WAN 
Statistics 
LAN 


XTM | Reset Statistics | 
xDSL 


Interface Description Received Transmitted 
Bytes Pkts Errs Drops Bytes Pkts Errs Drops 
ptm0 _ipoe_0_0_1 o ojojo jolojoj o] 


pAn A a Daa a a am ae 
The fields on this page are explained in the following table. 


Field Name Description 


Interface ‘ Available WAN interfaces. Options are: atm, ptm, and eth, 
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Statistics - WAN Page for SR515ac Gateway 


The Statistics - WAN page for the SR515ac gateway is shown below. Statistics are provided for Multicast, Unicast, Broadcast, anf total 
packets received and sent. 


The columns labeled Interface and Description for the other gateway models are combined into the Service Description column on the 
SR515ac page. 
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xTM 


On this page, you can view the ATM/PTM statistics for your gateway. All WAN interfaces configured for your SmartRG gateway are 
included. 


In the left navigation bar, click Device Info > Statistics > xTM. The Interface Statistics page appears. 


To reset these counters, click Reset Statistics near the bottom of the page. 
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Device Info Interface Statistics 


Summary Port In Out In Out In OAM Out OAM In ASM Out ASM in Packet In Cell 
WAN Number Octets Octets Packets Packets Cells Cells Cells Cells Errors Errors 


Statistics 


LAN 


WAN Service Reset 


xDSL 


M p a a, p iia a aA aaa A pA, PATI W team atm, 


The fields on this page are explained in the following table. 
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Field Name Description 


Port Number ‘ Statistics for Port 1, or both ports if Bonded. 


Out OAM Cells : Total quantity of transmitted OAM cells. 


ELETT E ETLER EEFT ELESETT cance ste Sh52 bee cee cesses 


In ASM Cells l Total quantity of received ASM cells. 


In Cell Errors ‘ Total quantity of received cell errors. 


xDSL 
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On this page, you can view the DSL statistics for your gateway. All xDSL (VDSL or ADSL) interfaces configured for your SmartRG gate- 
way are included. The terms and their explanations are derived from the relevant ITU-T standards and referenced accordingly. 


1. In the left navigation bar, click Device Info > Statistics > xDSL. The Statistics - xDSL page appears. 
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Device Info Statistics -- xDSL 
Summary 
WAN 
Statistics 

LAN 
WAN Service 
xTM 
xDSL 
Route 
ARP 
DHCP 

Advanced Setup 

Wireless 

Diagnostics 

Management 

Logout 


Bonding Line Selection | line 1 +| 


{ xDSL BER Test || Reset Statistics | 


2. Inthe Bonding Line Selection field, select the line for which you want to view the statistics. 
Note: For the SR350n, SR360n, and SR505n models, the Bonding Line Selection field does not appear. 


3. To run an xDSL Bit Error Rate (BER) test which determines the quality of the xDSL connection: 
a. Scroll to the bottom of the page and click xDSL BER Test. The ADSL BER Test dialog box appears. 


b. Inthe Tested Time field, select the duration in seconds and click Start. Options range from 1 second to 360 seconds. 
The test transfers idle cells containing a known pattern and compares the received data with this known pattern. Com- 
parison errors are tabulated and displayed. 


4. Toreset the counters, click Reset Statistics at the bottom of the page. 


The fields on this page are explained in the following table. 
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Field Name Description 
‘xDSL mode that the modem has trained under, such as ADSL2+, G.DMT, etc. 


The signal-to-noise ration margin (SNRM) is the maximum increase (in dB) of the 
‘received noise power, such that the modem can still meet all of the target BERs over all 
: the frame bearers. [2] 


‘ The signal attenuation is defined as the difference in dB between the power received at 
‘ the near-end and that transmitted from the far-end. [2] 


Attainable Rate ‘ The typically obtainable sync rate, i.e., the attainable net data rate that the receive PMS- 
(Kbps) : TC and PMD functions are designed to support under the following conditions: 


e Single frame bearer and single latency operation 

e Signal-to-Noise Ratio Margin (SNRM) to be equal or above the SNR Target Mar- 
gin 
BER not to exceed the highest BER configured for one (or more) latency paths 
Latency not to exceed the highest latency configured for one (or more) latency 
paths 
Accounting for all coding gains available (e.g., trellis coding, RS FEC) with latency 
bound 


Accounting for the loop characteristics at the instant of measurement [2] 


: (Visible only for gateways connected via DSL) Physical Layer Retransmission feature 
‘ status. Options are Inactive and Active. 


: (Visible only for gateways connected via DSL) The status of video data retrieval from the 
‘ buffer. Options are Inactive and Active. 


‘ The current net data rate of the xDSL link. Net data rate is defined as the sum of all 
: frame bearer data rates over all latency paths. [2] 


B (# of bytes in Mux : The nominal number of bytes from frame bearer #n per Mux Data Frame at Reference 
Data Frame) : Point A in the current latency path. 


M (# of Mux Data: The number of Mux Data Frames per FEC Data Frame in the current latency path. 
Frames in FEC Data 


T (Mux Data Frames ‘: The ratio of the number of Mux Data Frames to the number of sync bytes in the current 
over sync bytes) ‘ latency path. 


R (# of check bytes in: The number of Reed Solomon redundancy bytes per codeword in the current latency 
FEC Data Frame) : path. This is also the number of redundancy bytes per FEC Data Frame in the current 
‘ latency path. 
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Field Name 


S (ratio of FEC over 
PMD Data Frame 


L (# of bits in PMD 
Data Frame) 


RS Uncorrectable 
Errors 


RS Codewords 
Received 


RS Codewords Cor- 
rected 


OCD Errors 


LCD Errors 
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Description 


‘ The ratio of FEC over PMD Data Frame length. 


‘ The PMS-TC delay in milliseconds of the current latency path (or the lowest latency path 
‘when running dual-latency paths). 


‘ The number of Reed-Solomon-based Forward Error Correction (FEC) codewords trans- 
‘ mitted/received. 


: The number of Reed-Solomon-based FEC codewords received with errors that have been 
‘ corrected. 


‘ The number of Reed-Solomon-based FEC codewords received with errors that were not 
‘ correctable. 


(Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords 
‘ received. 


: (Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords 
‘ corrected. 


(Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords 
‘ Uncorrected 


‘A count of ATM HEC errors detected. As per ITU-T G.992.1 and G.992.3, a1-byte HEC is 

: generated for each ATM cell header. Error detection is implemented as defined in ITU-T 
 |.432.1 with the exception that any HEC error shall be considered as a multiple bit error, 
‘and therefore, HEC Error Correction is not performed. [1], [2] 


‘ Total number of Out-of-Cell Delineation errors. ATM Cell delineation is the process which 
‘ allows identification of the cell boundaries. The HEC field is used to achieve cell delin- 

‘ eation. [4] An OCD Error is counted when the cell delineation process transitions from the 
: SYNC state to the HUNT state. [2] 


SPS Se. skeet pte RR A A ERE EREE KOENE ar Spas N REA O ody wrest a ym toes y arte eget a Sipe teens aed reese: 


‘ Total number of Loss of Cell Delineation errors. An LCD Error is counted when at least 
‘one OCD error is present in each of four consecutive overhead channel periods and SEF 
‘ (Severely Errored Frame) defect is present. [2] 


‘ Total number of Errored Seconds. This parameter is a count of 1-second intervals with 
‘one or more CRC-8 anomalies. [4] 


SMART/RG 


Field Name Description 


Total SES ‘ Total number of Severely Errored Seconds. An SES is declared if, during a 1-second inter- 
‘val, there are 18 or more CRC-8 anomalies in one or more of the received bearer chan- 
‘nels, or one or more LOS (Loss of Signal) defects, or one or more SEF (Severely Errored 
: Frame) defects, or one or more LPR (Loss of Power) defects. [4] 


Total UAS ‘ Total number of Unavailable Seconds. This parameter is a count of 1-second intervals for 
‘which the xDSL line is unavailable. The xDSL line becomes unavailable at the onset of 10 
‘ contiguous SESs. These 10 SES’s shall be included in the unavailable time. Once unavail- 
: able, the xDSL line becomes available at the onset of 10 contiguous seconds with no 
‘ SESs. These 10 seconds with no SES’s shall be excluded from unavailable time. [4] 


References 

[1] ITU-T Recommendation G.992.1 (1999), Asymmetric digital subscriber line (ADSL) transceivers. 

[2] ITU-T Recommendation G.992.3 (2005), Asymmetric digital subscriber line transceivers 2 (ADSL2). 

[3] ITU-T Recommendation G.997.1 (2006), Physical layer management for digital subscriber line (DSL) transceivers. 


[4] ITU-T Recommendation |.432.1 (1999), B-ISDN user-network interface — Physical layer specification: General characteristics. 


Route 


On this page, you can view the LAN and WAN route table information configured in your SmartRG Gateway for both IPv4 and IPv6 


implementation. 


In the left navigation bar, click Device Info > Route. The following page appears. 
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Device Info -- Route 
peso Flags: U - up, ! - reject, G - gateway, H - host, R - reinstate 
a D - dynamic (redirect), M - modified (redirect). 
tattstics 


Destination Gateway Subnet Mask Flag Metric Service interface 
192.168.1.0)0.0.00 255.255235.0]u Jo | [bo 
IPvé Route 


Flags: U - up, ! - reject, G - gateway, H - host, R - reinstate 
D - dynamic (redirect), M - modified (redirect). 


Destination Next Hop Flag Metric Service interface 


The fields on this page are explained in the following table. 


Field Name Description 


Destination (Including IPv6 Route) : Destination IP addresses. 


‘ Gateway IP address. 


Subnet Mask : Subnet Masks. 


Sieve ee eee Sepieend wines aie. Se eyeetee 3 Se eye Stasele: CO ere ee a eee ee ee eae ee ere eee ee ee ee ee ee 


Flag (Including IPv6 Route) Status of the flags. 
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Metric (Including IPv6 Route) : Number of hops required to reach the default gateway. 


PEE EEEE OT EET EES TER ETET EFE LLAES LEELEE ETE eee tae eee Sees 


Service (Including IPv6 Route) ; Service type. 


EE S E E E T E E E E E PE E A A E F E NE P E EEE A E E E E EE 


Interface (Including IPv6 Route) ‘ WAN/LAN interface. 
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Next Hop (IPv6 Route only) : Next hop IP address. 
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On this page, you can view the host IP addresses and their hardware (MAC) addresses for each LAN Client connected to the gateway via 
a LAN Ethernet port or wireless LAN. 


In the left navigation bar, click Device Info > ARP. The following page appears. 
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Device Info Device Info -- ARP 
Summary 


WAN IP address Flags HW Address 


Statistics 


192.168.1.10 | Complete | 98:fc:11:aa:2a:7a 
192.168.1.3 68:5b:35:94:c9:b6 | brO | 
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The fields on this page are explained in the following table. 


Field Name Description 


IP address ; The IP address of the host. 


Device : The system level interface by which the host is connected. Options are: br(n), atm(n), eth(n), and atm(n). 


DHCP 


The DHCP page displays a list of locally connected LAN hosts and their DHCP lease status, which are directly connected to the SmartRG 
Gateway via a LAN Ethernet port or Wireless LAN. 


In the left navigation bar, select Device Info > DHCP. The following page appears. 
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Device Info Device Info -- DHCP Leases 
Summary 
WAN 
Statistics 


Hostname MAC Address IP Address Expires In 


Davids- Pie ida E 23 hours, 18 minutes, 9 
paps |ea:suss:o4s:be 192.168.1.3 FTAA 
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Route 


The fields on this page are explained in the following table. 


FieldName Description 


Expires In The time until the DHCP lease expires for each LAN device. 


ADVANCED SETUP 


In this section, you can configure network interfaces, security, quality of service settings, and many other settings for your gateway and 
network. 


Layer2 Interface 


In this section, you can configure interfaces for ATM, PTM and Ethernet interfaces. Generally you can accept the settings configured by 
default. If your network is highly customized, you may need to modify some of the settings, such as Username and Password. 


ATM Interface 


On this page, you can configure Asynchronous Transfer Mode / Permanent Virtual Conduit (ATM/PVC) settings for your gateway. You 
can customize latency options, link type, encapsulation mode and more. 


Note: Devices (routers) on both ends of the connection must support ATM / PVC. 
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1. In the left navigation bar, click Advanced Setup > Layer2 Interface > ATM Interface and then click Add. The following page 


appears. 
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Device Info 
Advanced Setup 

Layer2 Interface 

WAN Service 

4G LTE Settings 

Ethernet Config 

LAN 

NAT 

Security 

Parental Control 

Quality of Service 

Routing 

DNS 

DSL 

DSL Bonding 

UPnP 

DNS Proxy 

Interface Grouping 

IP Tunnel 

IPSec 

Certificate 

Multicast 
Wireless 
Diagnostics 
Management 
Logout 
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ATM PVC Configuration 


This screen allows you to configure a ATM PVC. 


VPI: [o | [0-255] 
VCI: [235__| [32-65535] 


Select DSL Latency 
PathO (Fast) 
© Path1 (Interleaved) 


Select DSL Link Type (EoA is for PPPoE, IPoE, and Bridge.) 


© EoA 

O PPPoA 

© IPoA 

Encapsulation Mode: | LLC/SNAP-BRIDGING +| 
Service Category: UBR Without PCR + | 


Minimum Cell Rate: A {cells/s] (-1 indicates no shaping) 


Select Scheduler for Queues of Equal Precedence as the Default Queue 
© Weighted Round Robin 
© Weighted Fair Queuing 


Default Queue Weight: 1 [1-63] 
Default Queue Precedence: 8 [1-8] (lower value, higher priority) 
VC WRR Weight: 1 | [1-63] 
VC Precedence: 8 [1-8] (lower value, higher priority) 


Note: VC scheduling will be SP among unequal precedence VC's and WRR among equal precedence VC's. 
For single queue VC, the default queue precedence and weight will be used for arbitration. 
For multi-queue VC, its VC precedence and weight will be used for arbitration. 


(Back) CAppiv/Save ) 


2. Modify the settings as desired, using the information provided in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name 


Description 


' Enter a Virtual Path Identifier. A VPI is an 8-bit identifier that uniquely identifies a network 
' path for ATM cell packets to reach its destination. A unique VPI number is required for each 


: ATM path. This setting works with the VCI. Each individual DSL circuit must have a unique 
‘ VPI/VCI combination. String limits are: 0-255. 


235 5 gvare e315, ceneysieon E E E IE EN R E ST ETE ETE E E E E este O E E onnerate aia seve E EE E E E ates ecb: cesses <s area's Sege-bseisyeianete "S12 aise ee eS 


Enter a Virtual Channel Identifier.A VCI is a 16-bit identifier that has a unique channel. 
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Field Name Description 


: Options are: 32-65535. 


Select DSL Latency: Select the level of DSL latency. Options are: 


e PathO Fast: No error correction and can provide lower latency on error free lines. 


Path1 Interleaved: Error checking that provides error free data which increases 
latency. 
PathO&1 Both: Fast & Interleaved. 


Select Link Type ; Select the linking protocol. EoA is the most popular with PPPoA a close second (used with 
; many legacy ISPs). Options are: 
e EoA: Ethernet over ATM. 
e PPPoA: Point-to-Point Protocol over ATM. 


IPoA: Internet Protocol over ATM. 


Encapsulation : Select whether multiple protocols or only one protocl is carried per PVC (Permanent Virtual Cir 
Mode ' cuit). Options are: 
e LLC/SNAP-BRIDGING: Logical Link Control used to carry multiple protocols in a single 
PVC. 


e VC/MUx: Virtual Circuit Multiplexer creates a virtual connection used to carry one 
protocol per PVC. 


EE E EE E ETES hepa ete ERES noes Se se Seed E ye R RR E R ERROA E E ERAAN EENE 


Service Category : Select the bit rate protocol. Options are: 


e UBR without PCR: Unspecified Bit Rate with no Peak Cell Rate, flow control or time 
synchronization between the traffic source and destination. Commonly used with 
applications that can tolerate data / packet loss. 


UBR with PCR: Same as above but with a Peak Cell Rate. 

CBR: Constant Bit Rate relies on timing synchronization to make the network traffic 
predictable. Used commonly in Video and Audio traffic network applications. 

NON Realtime VBR: Non Realtime Variable Bit Rate used for connections that trans- 
port traffic at a Variable Rate. This category requires a guaranteed bandwidth and 
latency. It does not rely on timing synchronization between the destination and 
source. 

Realtime VBR: Realtime Variable Bit Rate. Same as the above option but relies on 
timing and synchronization between the destination and source. This category is com- 
monly used in networks with compressed video traffic. 


PPE EEEE OE E E E E EEAS 
Minimum Cell ‘Minimum allowable rate (cells per second) at which cells can be sent on a ATM network. For 
‘no shaping, enter -1. 


Scheduler for The algorithm used to schedule the queue behavior. VC scheduling is unique from Default 
Queues of Equal ' Queues. Options are: 
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Field Name Description 


Precedence as the : WRR: Weighted Round Robin packets are accessed in a round robin style and classes 
Default Queue: can be given. 


WFQ: Weighted Fair Queuing packets are assigned in a specific queue. 
Default Queue Weight: The default weight of the specified queue. Options are: 1-63. 


Default Queue Precedence: The precedence of the specified group. Options are: 1-8 
PTM Interface 


The SmartRG gateway's VDSL2 standards support Packet Transfer Mode (PTM). An alternative to ATM mode, PTM transports packets 
(IP, PPP, Ethernet, MPLS, and others) over DSL links. For more information, refer to the IEEE802.3ah standard for Ethernet in the First 
Mile (EFM). Some 500 series gateways have a PTM interface configured by default. 


On this page, you can configure a PTM interface for your gateway. 


1. In the left navigation bar, click Advanced Setup > Layer2 Interface > PTM Interface and then click Add. The following page 
appears. 
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PTM Configuration 


This screen allows you to configure a PTM flow. 


ayer? interface 


ATM interface 


Setect Scheduler for Queues of Equal Precedence as the Default Queue 
PTM Interface © Weighted Round Robin 
ETH Interface Weighted Fair Queuing 
VAN Service 
IG LTE Default Queue Weight: : [1-63] 
Default Queue Precedence: è [1-8} (lower vatue, higher priority) 


Default Queue Minimum Rate: -1 [1-0 Kbps] (-1 indicates no shaping) 
NAT Default Queue Shaping Rate: 4 [1-0 Kbps] (-1 indicates no shaping) 
ecurity Default Queue Shaping Burst Size: 3000 [bytes] (shall be >+1600) 


Parental Control ———— 
(Back | | AoptnsSove | 


a 


2. Modify the settings as desired. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Weighted Round Robin : Time slices are assigned to each process in equal portions and in circular order, hand- 
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Field Name Description 
‘ ling all processes without priority (also known as cyclic executive). 


Weighted Fair Queuing ' A data packet scheduling technique allowing different scheduling priorities to be 
' assigned to statistically multiplexed data flows. Since each data flow has its own 
queue, an ill-behaved flow (that sent larger packets or more packets per second than 
‘ the others since it became active) will only affect itself and not other sessions. 
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Default Queue Weight Enter a default weight of the specified queue. Options are: 1-63. 


Default Queue Pre- ‘ Enter a precedence for the specified queue. Options are: 1-8. 


cedence 


Default Queue Min- (Does not appear for SR350n models) The default minimum rate at which traffic can 
imum Rate : pass through the queue. For no shaping, enter -1 (disabled). Options are: 1-0 Kbps. 


Default Queue Shaping (Does not appear for SR350n models) The shaping rate for the specified queue. For no 
shaping, enter -1 (disabled). Options are: 1-0 Kbps. 


Default Queue Shaping ; (Does not appear for SR350n models) The maximum rate at which traffic can pass 
Burst Rate through the queue. Options are 1600 or greater. 


ETH Interface 


If you are using a gateway that is Ethernet-specific (non-DSL), you may want to configure an ETH interface to manage communication. 
Most models support Ethernet and can be configured for Ethernet and DSL at the same time. Your gateway has four LAN ports. One of 
them can be re-purposed to become an RJ45 WAN port when needed. 


On this page, you can configure an Ethernet interface for your gateway. 


1. In the left navigation bar, click Advanced Setup > Layer2 Interface > ETH Interface. If no WAN port is configured, the following 
page appears. 
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ETH WAN Interface Configuration 


Choose Add, or Remove to configure ETH WAN interfaces. 
Alow one ETH as layer 2 WAN interface. 


2. Click Add. 
3. If a WAN port is already configured or you clicked Add, the following page appears. 
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ETH WAN Interface Configuration 


Choose Add, or Remove to configure ETH WAN interfaces. 
Alow one ETH as layer 2 WAN interface. 


Note: If a WAN port it is already configured, you must remove it before you can define a new one. Before you can remove the 
existing port, you must first modify or delete any WAN service that uses it. The Add button does not appear until the existing 
port is removed. Click the Remove checkbox and then click the Remove button. 


. Select the LAN port you wish to act as a WAN port. 
5. Click Apply/Save to commit your changes. 
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WAN Service 


In this section, you can configure WAN services for: 


e "PPP over Ethernet” 


e "IP over Ethernet" 


A sample configuration scenario is provided for each variation. 


PPP over Ethernet 


There are several parts to configuring a PPP over Ethernet WAN service. You will progress through several pages to complete the con- 


figuration. 


1. In the left navigation bar, click Advanced Setup > WAN Service and then click Add. The following page appears. 
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Device info WAN Service Interface Configuration 


Advanced Setup 
Layer? Interface Select a layer 2 interface for this service 


ATM interface 
PTM Interface Note: For ATM interface, the descriptor string is (portid_vpi_vci) 
For PTM interface, the descriptor string is (portid_high_low) 
ETH interface Where portid=0 --> DSL Latency PATHO 
WAN Service portid=1 --> DSL Latency PATH 
4G LTE Settings portid=4 --> DSL Latency PATHOG1 
low #0 --> Low PTM Priority not set 
low =1 -»> Low PTM Priority set 
LAN high =0 --> High PTM Priority not set 
NAT high #1 --> High PTM Priority set 


Security 

Parental Control 
Quality of Service 

Routing Heck) (ew 


Ethernet Config 


DNS 
— B T T a ee a ee a ee 


2. Select the Layer2 interface to use for the WAN service. 
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3. Click Next. The following page appears. 
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Device Info WAN Service Configuration 
Adv 
wey oe Select WAN service type: 
Layer2 Interface @ PPP over Ethernet (PPPoE) 
ATM interface © IP over Ethernet 
PTM Interface © Bridging 


ETH Interface 
WAN Service 


Enter Service Description: |oppce_0_0_1 


4G LTE Settings 
Ethernet Config 
LAN Network Protocal Selection: 
NAT LIPV4 Only : 


Parental Control e ern S pn 
Quality of Service E i 


_— n a oe N ee a 


4. Select the PPP over Ethernet (PPPoE) WAN service type. 
5. Modify the other settings as needed. 


The fields on this page are explained in the following table. 


Field Name Description 

Enter Service ‘Enter a name to describe this configuration. 

Description 

Network Protocol : (For SR515ac models, this field is named Internet Protocol Selection) Different scheduling priorities can be 

Selectii ‘applied to statistically multiplexed data flows. Since each data flow has its own queue, an ill-behaved flow 
(which has sent larger packets or more packets per second than the others) will only punish itself and not 
‘other sessions. Options are IPv4 Only, IPv4&IPv6 (Dual Stack), and IPv6 Only. 


Note: When you select IPV4&IPV6 or IPV6, the subsequent options presented will change accordingly. 


Enter 802.1P Pri- : (Available for SR515ac models only) Options are O - 7. The default is 0. 
For tagged service, enter values in this field and the 802.1Q VLAN ID field. 


' For untagged service, enter -1 (disabled) in this field and the 802.1Q VLAN ID field. 
E E E E RS l PA P EE E E A E EE E E E aoe L LEO EE L L TE L L E EE AS Goat S E E P EER E O A ERTL E E E E T E E A T E 


vp Pa (Available for SR515ac models only) Options are 0 - 4094. The default is -1 (disabled). 


l For tagged service, enter values in this field and the 802.1P Priority field. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Field Name Description 


For untagged service, enter -1 (disabled) in this field and the 802.1P Priority field. 


Select VLAN TPID : (Available for SR515ac models only) Select the TPID for this VLAN. Options are 0x8100, 0x88A8, and 
:0x9100. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


6. Click Next. The following page appears where you will configure the PPP Username, Password and related information. 
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Oevice info PPP Username and Password 
AIEO Setup 
Layer? terface 
ATM interface 
FT terface 


PPP usually requires that you Nave a user MEME Bnd DENEWword to estADiRD your Connection. 
ih the Domes Selow, enter the user name and paseword that your ISP Nas provides to you. 


ETH interface 


4G LTE Settings PPPOL Service Name: 

Erenet Contig Authentication Method: AJTO ‘ 
Link Control Protocol 
UCP Keepative Period is): T 


Aavarced OMI 


Noo OMZ? IP Address: miwat 
Non DMZ Net bac pinse 


Mo Use Static Pre Address 

Prt AOS em: acne 

E Retry PPP pawword on authentication error 

Max PPP authentication retries (1.65536): sme fuse 65596 to retry forever) 
Cradle PPP Orbug Mode 
Bridge PPPOE Frames Between WAN and Local Ports 

= (hadle fhei 


Network Adress Translation Settings 


Network Adress Translation (NAT) allows you to stare one Wide Area Network (WAN) P 
addres for multiple computers on your Local Area Network (LAN). 


M Enable NaT 


Enadte Futicone NAT 
Ensdie SP ALG 


Multicast Proxy 
Enable IGMP muiticast Proxy 


No Multicast VLAN Filter 


MTU size [1370-1492]: (Gad 


7 Use Base MAC Address on this WAN Interface (Note: anty select thet for one WAN 
terface) 
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7. Modify the fields as needed. 


The fields on this page are explained in the following table. 


Field Name Description 


PPP Username ‘ Enter the username required for authentication to the PPP server. 


Authentication Method 


‘ Select a means for authentication. Options are: 


e AUTO: Attempt to automatically detect handshake protocol (listed below)s. 
e PAP: Password Authentication Protocol (plaintext passwords). 
CHAP: Challenge Handshake Authentication Protocol. (MD5 hashing scheme on passwords). 


MSCHAP: Microsoft Challenge Handshake Authentication Protocol. (Microsoft encrypted 
seis authentication ae: 


‘ Enter the number of additional attempted packets that the gateway will send (in the event that the 
‘ PPP server does not respond to the Keepalive) before giving up and declaring the connection as 
‘ Failed. 


Dial on Demand ‘ Enables Inactivity Timeout (minutes). Enter the number of minutes before timeout kicks in. Options 


‘are O - 4320. The default is zero (0) which equals not applicable. 


‘ Connection automatically starts when there is outbound traffic to the Internet. It automatically ter- 
' minates if the connection is idle, based on the value in the Idle Timeout setting. 


(Applies only when PPP IP Extensionis selected) Specify the IP address to which PPPoE traffic is for- 
‘ warded. 


Use Static IPv4 Address Specify the IPv4 Address to apply for this WAN service. 


Retry PPP password on ' Enter the maximum number of PPP authentication retries on failure. Options are 1 - 65536. Entering 
authentication error : 65536 sets the maximum to unlimited. 


Enable PPP Debug Mode : Select to have the system put more PPP connection information into the system log of the device. 
‘ This is for debugging errors and not for normal usage. 


Bridge PPPoE Frames _: Select to enable PPPoE passthrough to relay PPPoE connections from behind the modem. Also known 
Between WAN and Local as Half-Bridged mode. 


Enable Firewall ‘ Select to enable functions in the Security sub-menu. 
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Field Name Description 


Enable NAT i Select to enable sharing the WAN interface across multiple devices on the LAN. Additional NAT and 
: PPPoE NAT features appear. 


(Appears when Enable NAT is selected) Click to enable Session Initiation Protocol (SIP) pass-through 
‘ NAT. Used for Voice over IP (VOIP) applications. 


‘ (Appears when Enable NAT is selected) Click to enable Internet Group Membership Protocol (IGMP) 
‘ multicast. Used by IPv4 hosts to report multicast group memberships to any neighboring multicast 
‘ routers. 


: (Not available for SR515ac models) Disables multicast filtering between WAN and LAN (VlanMux) 
i  netwoik: 


MTU sizes ; Enter the MTU (Maximum Transmission Unit) size for SmartRG gateways supporting a gigabit-cap- 
‘able WAN interface. Options are 1370 - 1492 bytes. The default is 1492 bytes. 
: This feature is supported by SmartRG models SR500n, SR505n, SR510n, SR550n and SR552n. 
‘ Firmware v2.5.0.7 or later is required. 
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Use Base MAC Address : Use the SmartRG Devices Base (Primary) MAC address. When unchecked, a unique MAC is assigned 
on this WAN interface _ : for each service. 


: (Appears when Use Base MAC Address is deselected) Enter the MAC address to be used as the close 
‘ adddress. 


Additional options for : Select options as needed. Options are: 


IPV6 e Enable IPv6 Unnumbered Model 


e Enable IPv6 Unnumbered Model 
Launch Dhcp6c for Address Assignment (IANA) 
Launch Dhcp6c for Prefix Delegation (IAPD) 
Enable MLD Multicast Proxy 


8. Click Next. The following page appears where you will select the interface used as a default gateway used for the PPP service 
being created. 
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Device info Routing — Default Gateway 
Advanced Setup 

Layer? interface Default gateway interface list can have multiple WAN interfaces served as 
ATM Interface system default gateways but only one will be used according to the priority 
PTM Interface with the first being the higest and the last one the lowest priority if the WAN 
ETH Interface interface is connected. Priority order can be changed by removing all and 

WAN Service adding them back in again. 

4G LTE Settings 

Ethernet Config Selected Default Available Routed WAN 

LAN Gateway Interfaces Interfaces 

NAT jo Sti‘i‘éC*' 

Security Í 

Parental Control o 

Quality of Service = 2) 

Routing 7) 

ONS 

OSL 

DSL Bonding P +- - —= 

UPnP 

DNS Proxy Bae | Nee | 


interface Grouping 


9. Click the arrows to move your selection from left to right or from right to left. 
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10. Click Next. The following page appears where you will select DNS Server settings. 
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Device info 
Advanced Setup 
Layer? interface 
ATM Interface 
PTM Interface 
ETH interface 
WAN Service 
4G LTE Settings 
Ethernet Config 


Parental Control 

Quality of Service 

Routing 

DNS 

DSL 

DSL Bonding 

UPnP 

DNS Proxy 

interface Grouping 

IP Tunnel 

IPSec 

Certificate 

Mustticast 
Wireless 
Diagnostics 
Management 
Logout 


DNS Server Configuration 


Select DNS Server Interface from available WAN interfaces OR enter static 
DNS server IP addresses for the system. in ATM mode, if only a single PVC 
with IPoA or static IPOE protocol is configured, Static DNS server IP addresses 
must be entered, 
DNS Server Interfaces can have multiple WAN interfaces served as system 
dns servers but only one will be used to the priority with the first 
being the higest and the last one the lowest priority if the WAN interface is 
ee OEA eT ITOE SE DNE EAR 
in again. 


@ Select DNS Server Interface from available WAN interfaces: 


Selected ONS Server Available WAN 
Interfaces Interfaces 


a 


Back | Next) 


11. Select the DNS Server Interface from available WAN interfaces. 
12. Click the arrows to move your selection from left to right or from right to left. 
13. Alternatively, you can enter static DNS IP addresses in the Use the following Static DNS IP address section. 
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14. Click Next. The summary page appears indicating that your PPPoE WAN setup is complete. 
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Device info 
Advanced Setup 
Layer? interface 
ATM interface 
PTM interface 
ETH interface 
WAN Service 
4G LTE Settings 
Ethernet Config 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
OSL Bonding 


WAN Setup - Summary 
Make sure that the settings below match the settings provided by your ISP. 


Full Cone NAT: 


IGMP Multicast: 
Quality Of Service: 


Preval: C 


Click “Apply/ Save” to have this interface to be effective. Click “Back” to make 
any modifications. 
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15. Review the summary and either click Apply/Save to commit your changes or click Back to step through the pages in reverse 
order to make any necessary alterations. 


Note: For the SR515ac model, additional fields are listed for IGMP Multicast and MLD Multicast settings. 


IP over Ethernet 


There are several parts to configuring a IP over Ethernet WAN service. You will progress through several pages to complete the con- 


figuration. 
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1. In the left navigation bar, click Advanced Setup > WAN Service and then click Add. The following page appears. 
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Device Info WAN Service Interface Configuration 


Advanced Setup 
Layer? Interface Select a layer 2 interface for this service 


ATM Interface 
PTM Interface Note: For ATM interface, the descriptor string ts (portid_vpi_vci) 
For PTM interface, the descriptor string ts (portid_high_low) 

SAHNE Where portid=0 --> DSL Latency PATHO 

WAN Service portid=1 -> DSL Latency PATHI 

portide4 --» DSL Latency PATHOG1 

Ethernet Config low ve Seg skis! Lert! not wg 

Fai high =0 --> High PTM Priority not set 

NAT high =1 --> High PTM Priority set 


Security 

Parental Control (eemo/i0_0.1) =) 

Quality of Service 

Routing Bock) | Next | 

ee i Oe A a AAO a a, e n oni 


4G LTE Settings 


2. Select the Layer2 interface to use for the WAN service and click Next. The following page appears. 
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Device info WAN Service Configuration 
Advanced Setup Select WAN service type: 
Layer? interface © PPP over Ethernet (PPPoE) 
ATM interface @ IP over Ethernet 
PTM Interface © Bridging 
ETH interface 
WAN Service 


4G LTE Settings 


Ethernet Config 
pgp Network Protocal Selection: 

NAT [Weve ony s 

Security 

Parental Control ED] 
Quality of Service Sec j| uon. 
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3. Select the IP over Ethernet WAN service type. 
4. Modify the fields as needed. 


The fields on this page are explained in the following table. 
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Field Name Description 


Enter Service ‘ (Optional) Enter a name to describe this configuration. 
Description 


Enter 802.1P Priority ! Options are 0 - 7. The default is 0. 
: For tagged service, enter values in this field and the 802.1Q VLAN ID field. 
‘ For untagged service, enter -1 (disabled) in this field and the 802.1Q VLAN ID 


ek 802.1Q VLAN ; Options are 0 - 4094. The default is -1 (disabled). 


' For tagged service, enter values in this field and the 802.1P Priority field. 


‘ For untagged service, enter -1 (disabled) in this field and the 802.1P Priority field. 


Network Protocol : This data packet scheduling technique allows different scheduling priorities to be 
Selection ‘ applied to statistically multiplexed data flows. Since each data flow has its own 
queue, an ill-behaved flow (which has sent larger packets or more packets per 
‘ second than the others since it became active) will only punish itself and not other 
; sessions. Options are IPv4 Only, IPv4&IPv6 (Dual Stack), and IPv6 Only. The 
‘ default is IPv4 Only. 


l Note: When selecting IPV4&IPV6 or IPV6, the subsequent options presented will 
‘ change accordingly. 
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5. Click Next. The following page appears. 
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WAN IP Settings 
Device info 
Advanced Setup Enter information provided to you by your ISP to configure the WAN IP 
2 interface settings. 
sob Notice: If "Obtain an IP address automatically” is chosen, DHCP will be 
ATM Interface enabled for PVC in IPoE mode. 
PTM interface If “Use the following Static IP address” is chosen, enter the WAN IP address, 
ETH Interface subnet mask and interface gateway. 
WAN Service @ Obtain an IP address automatically 
AG LTE Settings Option 60 Vendor: of 
Ethernet Config Option 61 IAID: (8 hexadecimal digits) 
Option 61 DUID: (hexadecimal digit) 
Option 125: @ Disable Enable 
Use the following Static IP address: 
WAN IP Address: 
Parental Control WAN Subnet 4 
Quathy of Service WAN gateway IP Address: 
Routing 
DNS 
DSL ) Advanced OMZ 
DSL Bonding Non DMZ IP Address: 192.1082.1 
UPnP Non DMZ Net Mask: 295.255.255.9 
DNS Proxy = 
Interface Grouping Bock} | Next 
IP Tunnel ee ee i eee ee 


6. Enter the relevant WAN IP Settings. 
The fields on this page are explained in the following table. 
Field Name Description 


Obtain an IP address automatically ; When you wish the ISP to automatically assign the WAN IP to the gateway. 
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‘ (Optional) Broadcast a specific vendor ID for the DHCP server to accept the device. 


be eels ri tees se eee ee Se nee ce Eee 154 Sae a USGS eee esse ee Gee eee tA Seat eeswo ess 


l (Optional) Interface Association Identifier (IAID). A unique identifier for an IA, 
‘ chosen by the client. 


: (Optional) DHCP Unique Identifier (DUID) is used by the client to get an IP address 
‘ from the DHCP server. 


: Use this section to manually declare the static IP information provided by your ISP. 
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WAN IP Address ‘If using a static IP address, enter the static WAN IPV4 Address. 
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Field Name Description 


WAN Subnet Mask : If using a static IP address, enter the static Subnet Mask. 
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WAN gateway IP Address ‘If using a static IP address, enter the static Gateway IP address. 
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Advanced DMZ l (Optional) Select this option to enable Advanced DMZ on the WAN service. For 
‘ more information, see the knowledgebase on SmartRG Support site. 


: If using the Advanced DMZ feature, you can enter a specific vendor ID that will be 
‘ broadcast for the DHCP server to accept the device, y. e.g., 192.168.2.1. 


: If using the Advanced DMZ feature, you can enter a secondary LAN IP address for 
‘ the gateway. The default is 255.255.255.0. 


IPv6 settings 


The following fields appear when either IPv6 Only or IPv4&IPv6 (Dual Stack) network protocols are selected on the WAN Ser- 
vice Configuration page. 


Obtain an IPv6 address automatically ' Enables the DHCPv6 Client on this WAN interface. Select this option when you want 
‘ the ISP to automatically assign the WAN IP to the gateway. 


Dhcpv6 Address Assignment (IANA) ‘ Select this option for the CPE to receive WAN IP from ISP. 


Dhcpvé6 Prefix Delegation (IAPD) Select this option for the CPE to generate the WAN IP's prefix from the server's REST 
by MAC address. 


WAN IPv6 Address/Prefix Length ! If entering a static IP address, enter the IP address / prefix length. If you do not spe- 
: cify a prefix length, the default of /64 is used. 


Specify the Next-Hop IPv6 address i Enter the IP address of the next WAN in the group. This address can be either a local 
: link or a global unicast IPv6 address. 
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7. Click Next. The NAT settings appears. 
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Device Info Network Address Translation Settings 
Advanced Setup Network Address Translation (NAT) allows you to share one Wide Area 
Layer2 Interface Network (WAN) IP address for multiple computers on your Local Area 
ATM Interface Network (LAN). 
PTM Interface 
ETH Interface Enable NAT 
papi dae O Enable Fullcone NAT 
Ethernet Config 
LAN 
NAT O Enable SIP ALG 
Security @ Enable Firewall 


Parental Control 


Quality of Service 

Routing IGMP Multicast 

DNS 

DSL O Enable IGMP Multicast 
DSL Bonding 

UPnP 

DNS Proxy 
Interface Grouping 


IP Tunnel 
IPSec Use Base MAC Address on this WAN interface (Note: only select this for one 


WAN interface) 


O No Multicast VLAN Filter 


Certificate 
Multicast 


| Back || Next | 
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8. Modify the settings if desired. All settings are optional. 
Network Address Translation (NAT) allows you to share one Wide Area Network (WAN) IP address for multiple computers on 
your Local Area Network (LAN). If you do not want to enable NAT (atypical) and wish the user of this gateway to access the 
Internet normally, you need to add a route on the uplink equipment. Failure to do so will cause access to the Internet to fail. 


The fields on this page are explained in the following table. 


FIELD NAME DESCRIPTION 


Enable NAT ‘ Enable sharing the WAN interface across multiple devices on the LAN. 
; Also enables the functions in the NAT sub-menu and addition PPPoE NAT 
: features to select. 


‘ (Appears when Enable NAT is selected) Enables what is known as one-to- 
' one NAT. 


(Appears when Enable NAT is selected) Enables Session Initiation Pro- 
' tocol (SIP) pass-through NAT. Used for Voice over IP (VOIP) applications. 


Enable Firewall ‘ Enables functions in the Security sub-menu 
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FIELD NAME DESCRIPTION 


Enable IGMP Multicast ' (Not available for SR515ac models) Enables Internet Group Membership 
‘ Protocol (IGMP) multicast. Used by IPv4 hosts to report multicast group 
: memberships to any neighboring multicast routers. 


: (Available for SR515ac models only) Click to enable Internet Group Mem- 
‘ bership Protocol (IGMP) multicast. Used by IPv4 hosts to report multicast 
‘ group memberships to any neighboring multicast routers. 


: (Available for SR515ac models only) Select to enable this service to act as 
‘an IGMP multicast source. 


] (Not available for SR515ac models) Disables multicast filtering between 
: WAN and LAN (VlanMux) network. 


Use Base MAC Address : Use SmartRG Devices Base (Primary) MAC address. When unchecked, a 
on this WAN interface ' unique MAC per service is assigned. 


Enable MAC Clone : (Appears when Use Base MAC Address is deselected) Enter the MAC 
: address to be used as the close adddress. 


9. For the remaining WAN Service configuration pages, use the instructions provided in the default gateway step in the PPP over 
Ethernet section. 


Ethernet Config 


On the Ethernet Port Configuration page, you can set the speed and duplex mode for each of the Ethernet ports. 


1. In the left navigation bar, click Advanced Setup > Ethernet Config . The following page appears. 


SMART/RG’ 


forward thinking 


Device Info Ethernet Port Configuration 
Advanced Setup 


Layer2 Interface 
WAN Service Configure Max Bit Rate Duplex Mode Status 


4G LTE Settings (ee | 1000 | ruu  foown| 
[e f oeo [rat [down 

LAN 

NAT [ae o| 1000 | Fuu foon] 

S Control n 

ahri eas (ae | oo | ru |u 


Routing 
DNS 


Save/Apply | 


a T ewe eet 
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2. inthe Configure column, select an option (Auto, 100 Full, 100 Half, 10 Full or 10 Half) for each of the four Ethernet ports on 


your gateway. 
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These options represent 100 megabits or 10 megabits using half or full duplex transmission protocols. When you have a specific 
device with a known limited transmission speed capability, select one of the latter four options. If you select Auto, your gate- 
way will automatically select an appropriate setting based on Ethernet auto negotiation with the NIC of the LAN host. 


Note: Always select Auto for 1000 BaseT connections. 


The following are the variations for the 500 series of gateways: 


e For the SR510 and SR552n models, the fourth port is shown on this page as eth3/LAN1 and the ports are listed in reverse 
order.The eth4/WAN interface is also present on these models. 


e SR505n v2.5.0.x and later has an additional option of 1000 Full for the LAN1/WAN port. 
e SR552n v2.5.0.6 and later has an additional option of 1000 Full for all Ethernet interfaces. 


3. Click Apply/Save to commit your changes. 


MoCA 


On this page, you can configure MoCA settings. The MoCA (Multimedia over Coax) protocol enables distribution of content over existing 
in-home coaxial TV cabling at the same speed delivered by Ethernet networks. 


Note: This feature is available only on the SR512nm model. 


1. In the left navigation bar, click Advanced Setup > MoCA. The following page appears. 
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MoCA Configuration 
Configure the MoCA mierisce parameters. 


MRO Scan A Enable 

MOCA Band Band D (1125 - 1625) ‘ 
Last Operating 

Frequency (read oety): 10 Miz 


O Bardaidt SOMME (MeCA 11) * 
‘Set te bandwith to 50 Mew for greates! eteroperablity, set t 100 MHZ for highest performance 


MoCA Privacy: Enable 


ee ie ee ee i S T a 


2. Update or complete the necessary fields. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 
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Field Name Description 


Auto Scan ‘ Allows your gateway to scan automatically for the best connection to your 
‘ provider. This option is enabled by default. 


‘ Select the bandwidth for your connection. Select 50 MHz for better inter- 
‘ operability or select 100 MHz for better performance. 


MoCA Privacy To activate privacy mode, click the Enable checkbox. 


else te Se Se Se Sew eae eee BS piesenseeeeewesc oelstesesaeescse dew tees eeSie ee oe ce steeds seek ee $e 5e es eneeee css 


Privacy Password ‘ (Appears when MoCA Privacy is set to Enabled) Enter the MoCA password 
i for this gateway. 
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LAN 


On the Local Area Network (LAN) Setup page, you can configure the router's local IP addresses, subnet mask, DHCP behavior and other 
related LAN side settings for your gateway. 


1. In the left navigation bar, click Advanced Setup > LAN. The following page appears. 
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Standard Mode 
Blocking Mode 


1 Enable LAN side firewall 


Disable DHCP Server 

Enable DHCP Server 

Start IP Address: 192.162.1.2 

End IP Address: 192.168.1284 

Leased Time (hour): 24 

airy Static IP Lease List: (A maximum 32 entries can be configured) 


Parental Control 


Automatically create static IP leases for the following OUls: 


Ul Remove 


Lasao | [Remove Out | 


Configure DHCP Options: 
Option 66: (TFTP Server Name) 
t (Comma-seperated list of TFTP Server IPv4 
Option 150: Addess(es) (maximum 2 ontries)) 


yi stics © Enable DHCP Server Relay 
DHCP Server IP Address: 


Manageme 


© Configure the second IP Address and Subnet Mask for LAN interface 


( peowisere_) 


2. Customize the fields as desired. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Field Name Description 


Groupname ' (Available on SR515ac models only) Select an interface group from the list of available groups (defined on the Inter- 


' face Grouping page). 


Enable IGMP (Available on SR515ac models only) Enables your gateway to listen to IGMP network traffic between hosts and 
Snooping ‘ routers. By listening to these conversations, the gateway maintains a map of which links need which IP multicast 
: streams. 


Blocking Mode : Blocks multicast data traffic, preventing it from flooding to all bridge ports when no client subscriptions to a mul- 
' : ticast group are present. 


Enable IGMP LAN “(Available on SR515ac models only) Allows multicast traffic between LANs. This option is enabled by default. 
to LAN Multicast : 


Enable LAN Side 
Firewall 


‘ Prevents the DHCP functionality of your gateway from automatically assigning LAN IP addresses to host devices 
‘as they connect with the gateway. 


Enable / Disable : Allows the DHCP functionality of your gateway to automatically assign LAN IP addresses to host devices as they 
DHCP Server ‘ connect with the gateway. Fill in the next three fields to configure this action. 


‘ (Becomes editable when Enable DHCP Server is selected) Enter the beginning of the class C, IP address range to 
‘ be assigned by the DHCP server. 


End IP Address ‘ (Becomes editable when Enable DHCP Server is selected) Enter the end of the class C, IP address range to be 
' assigned by the DHCP server. 


Leased Time ‘ (Becomes editable when Enable DHCP Server is selected) Enter the number of hours for which an IP address will 
' be leased. 


Specify a literal, static, IP address to be associated with a specific MAC Address of one of your LAN host devices. 
‘ Click Add Entries. Enter the MAC address and IP address and click Apply/Save. Repeat this step to create any addi- 
‘ tional entries that you need. 


Automatically cre- ; For LAN hosts, IP addresses can be assigned manually or by using DHOP. Click Add OUI. Enter the OUI and click 
ate static IP leases : Apply/Save. Repeat this setp to create any additional entries that you need. 

from the following 

OUls ; 
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Field Name Description 


‘ For some devices that also require access to a TFTP server (device configuration name filesare in .cnf file format), 
‘which enables the device to communicate with other infrastructure, select this option to specify the name of the 
‘ TFTP server. Option 66 is an IEEE standard. 


Enable DHCP : (Not available on SR515ac models ) The DHCP relay agent operates as the interface between DHCP clients and the 
Server Relay ‘ server. It listens for client requests and adds vital configuration data, such as the client’s link information, which is 
needed by the server to allocate the address for the client. When the DHCP server responds, the DHCP relay 
‘ agent forwards the reply back to the DHCP client. 
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DHCP Server IP.: (Not available on SR515ac models ) Set the IP address to which LAN clients must connect to receive DHCP ser- 


Configure the i When you select this option, the IP Address and Subnet Mask fields appear where you can enter a second IP 
second IP address : address and Subnet mask to support a second, simultaneous LAN, i.e., the primary LAN might be defined as 
and subnet mask : 192.168.0.1 and this secondary LAN defined as 192.168.2.1. 

for LAN interface 
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NAT 


In the NAT section you can configure the settings for Network Address Translation including setting up virtual servers, port triggering 
and DMZ host. There is seldom need to customize these settings as the default settings manage the related features sufficiently for 
most environments. 


Virtual Servers 


Virtual Servers (more commonly known as Port Forwards) is a technique used to facilitate communications by external hosts with ser- 
vices provided within a private local area network. 


On this page, you can configure the virtual server settings for your gateway. 
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1. In the left navigation bar, select Advanced Setup > NAT. The following page appears. 
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Device info NAT -- Virtual Servers 

epoca Select the service name, and enter the server IP address and click 

Layer2 interface “Apply/Save" to forward IP packets for this service to the specified server. 
WAN Service NOTE: The “Internal Port End” cannot be modified directly. Normally, it is 
4G LTE Settings set to the same value as “External Port End”. However, if you modify 
Ethernet Config “internal Port Start’, then "internal Port End’ will be set to the same value 
AN as “Internal Port Start”. 

Fa Remaining number of entries that can be configured:96 


Virtual Servers Use Interface pppoe_0_0_i/ppp0 : 

Port Triggering : 

DMZ Host 
Security 
Parental Control 


Quality of Service 
Routing 


ONS 

DSL 

OSL Bonding 

UPnP 

DNS Proxy 

interface Grouping 

IP Tunnel 

IPSec 

Certificate 

Multicast 
Wireless 
Diagnostics 
Management 
Logout 


Internal Port internal Port 


2. Customize the fields to create your port forwarding entry. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Use Interface : Select the WAN interface to which this NAT rule will apply. 


Select a Service l Select from a list of application that typically require port forwards configured. The port ranges 
: and protocol fields will be pre-populated. 


Custom Service : If your application does not appear in the Select a Service list, you can enter a unique name 
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Field Name Description 


! for the application in this field. 


Server IP Address : Enter the IP address of the LAN client where the service is hosted. 


External Port Start : Enter the first external port for this server. 
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External Port End ' Enter the last external port for this server. 
Protocol ‘ Select the protocol to be used with this range of ports. Options are: TCP, UDP, or TCP/UDP. 


Internal Port Start : Enter the first internal port for this server. 


ecoleralsimiapene. dieters ES ee ee iy 


Internal Port End : Enter the last internal port for this server. 


Port Triggering 


Some applications require that specific ports in the gateway's firewall be opened for access by remote parties. The Port Trigger feature 
dynamically opens up the open ports in the firewall when an application on the LAN initiates a TCP/UDP connection to a remote party 
using the triggering ports. The gateway allows the remote party from the WAN side to establish new connections back to the application 


on the LAN side using the Open Ports. 
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1. In the left navigation bar, click Advanced Setup > NAT > Port Triggering and then click Add. The following page appears. 
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Device Info NAT -- Port Triggering 


anlari Some applications such as games, video conferencing, remote access 
Layer? Interface applications and others require that specific ports in the Router’s firewall be 
WAN Service opened for access by the applications. You can configure the port settings 
AG LTE Settings from this screen by selecting an existing application or creating your own 
Ethernet Config (Custom appiicationjand click “Save/Apply” to add it. 
AN Remaining number of entries that can be configured:96 


WAT Use Interface _pppoe_0_0_1/ppp0 + 
Virtual Servers Application Name: 
Port Triggering @ Select an application: ` Select One : 
DMZ Host > Custom application: 


Security 


Parental Control 
Quality of Service 
Routing 

DNS 

OSL 

DSL Bonding 
UPnP 

DNS Proxy 
interface Grouping 
IP Tunnel 

IPSec 

Certificate 
Multicast 


Trigger Port Trigger Port Trigger Open Port Open Port Open 
End Protocol 


SaresAooiy | 
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2. Customize the fields as needed for the firewall pinholes you wish to establish. A maximum 96 entries can be configured. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Use Interface l Select the interface for which the port triggering rule will apply. 
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Select an Application : Select the application which requires a port trigger entry. 


Custom Application ‘If the application you want does not appear in the selection list, enter a unique name 
‘ for the application for which you are creating a port trigger entry. This is a free-form 
‘ text field. 


: Enter the starting number of the range of available outgoing trigger ports. Options 
‘are: 1- 65535. 


Trigger Port End l Enter the end number of the range of available outgoing trigger ports. Options are: 1 
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Field Name Description 


' Select the protocol required by the application that will be using the ports in the spe- 
‘ cified range. Options are: TCP, UDP, and TCP/UDP. 


Open Protocol Select the protocol for the open port. Options are: TCP, UDP, and TCP/UDP. 


DMZ Host 


The Broadband Router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Serv- 
ers table to the DMZ host computer. If you want to route all internet traffic to a specific LAN device with no filtering or security, add the 


IP address of that device to this page. 


1. In the left navigation bar, click Advanced Setup > NAT > DMZ Host. The following page appears. 
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forward thinking 


Device info NAT -- DMZ Host 
sipped The Broadband Router will forward IP packets from the WAN that do not 
Layer? interface belong to any of the applications configured in the Virtual Servers table to 
WAN Service the DMZ host computer. 
4G LTE Settings 
Ethernet Config Enter the computer's IP address and click ‘Apply’ to activate the DMZ host. 
vie Clear the IP address field and click ‘Apply to deactivate the DMZ host. 
Virtual Servers OMZ Host IP Address: ] 
Port Triggering ene 
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2. Enter the DMZ Host IP Address. 
3. Click Apply/Save to commit the new or changed address. 
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Security 


In this section, you can configure filtering for IP and MAC. 


IP Filtering - Incoming 


On this page, you can add an incoming filter when refusal of data from the WAN to the LAN is desired. 


Note: This option is not available in the SR515ac model. 


1. Inthe left navigation bar, click Advanced Setup > Security > IP Filtering > Incoming and then click Add. The following page 
appears. 
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Device info Add IP Filter -- incoming 
Advanced Setup 


The screen allows you to create a filter rule to identify incoming IP traffic by 


Layer? Interface specifying a new filter name and at least one condition below. All of the 
WAN Service specified conditions in this filter rule must be satisfied for the rute to take 
4G LTE Settings effect. Click ‘Apply/Save’ to save and activate the fiter. 
Ethernet Config , z 
LAN Filter Name: 
NAT IP Version: ivs z) 
Security Protocol: $ 
IP Filtering Source IP address[/prefix length]: 
Outgoing Source Port (port or port:port): 
incoming Destination IP address[/prefix length): 
MAC Filtering Destination Port (port or port:port): 
Parental Controt WAN Interfaces (Configured in Routing mode and with firewall enabled) 
Quality of Service and LAN Interfaces 
Routing Select one or more WAN/LAN interfaces displayed below to apply this rule, 


DNS 
DSL 
DSL Bonding 


3 Select All pppoe_0_0_1/ppp0 brd/bro 


DNS Proxy 
ao ee aes ~~ eS POO OO O 
_ A”. _ a A 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Filter Name ‘A free-form text field. Enter a descriptive name for this filter. 
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Field Name Description 


IP Version i Select the IP version for this filter. Options are IPv4 and IPv6. The default is 


l Select the protocol to be associated with this incoming filter. Options are: 
‘ TCP/UDP, TCP, UDP, or ICMP. 


Destination IP address 
[/prefix length] 


Destination Port (port or 

port:port) 
Click to apply this rule to all WAN interfaces or only certain types. Options are 
Select All or the types defined for your network. 


First WAN interface Click the applicable options to apply this rule on specific WAN interfaces. The 
Last WAN interface ‘WAN interfaces display that you configured for your network in Routing and 
‘ that have a firewall enabled. 


First LAN interface 
Second LAN interface 


Bridged Interface l Click the applicable options to apply this rule on specific bridged interfaces. 


IP Filtering - Outgoing 
On this page, you can add an outgoing filter when refusal of data from the LAN to the WAN is desired. 


1. In the left navigation bar, click Advanced Setup > Security > IP Filtering > Outgoing and then click Add. The following page 
appears. 


Note: For SR515ac models, click Advanced Setup > Security to access this page. 
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Device info Add IP Filter -- Outgoing 
Advanced Set: 
sap Rr The screen allows you to create a filter rule to identify outgoing IP traffic by 
Layered Ikerrace specifying a new filter name and at least one condition below. All of the 
WAN Service specified conditions in this filter rule must be satisfied for the rule to take 
4G LTE Settings effect. Click ‘Apply/Save' to save and activate the filter. 
Ethernet Config F z m 
LAN iter Name: 
NAT IP Version: ivs : 
Security Protocol: + 
IP Filtering Source IP address{/ prefix length]: 
(Outgoing | Source Port (port or port:port): 
Incoming Destination IP address[/ prefix length): 
MAC Filtering Destination Port (port or port:port): 
Pacentgl Control 
DNS ADO. Save 


DSL 


DO i a a ee ee ee eee 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit the completed entry. 


The fields on this page are explained in the following table. 


Field Name Description 
Filter Name ‘ Enter a descriptive name for this filter. This is a free-form text field. 


IP Version l For the filter to be configured and effective for IPV6 , the gateway must be installed on a net- 
: work that is either a pure IPV6 network (with that protocol enabled) or is both IPV4 and IPV6 
‘ dual protocol enabled/configured. Options are IPv4 and IPv6. The default is IPv4. 


: If you select IPV6, both the Source and Destination IP address must be specified in IPV6 
‘ format. The following is an IPV6-compliant, hexadecimal address: 
‘ 2001:0DB8:AC10:FEO1:0000:0000:0000:0001. 
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Protocol ' Select the protocol profile for the filter you are defining. TCP/UDP is most commonly used. The 
' options are TCP/UDP, TCP, UDP, and ICMP]. 


Source IP address Enter the source IP address of a LAN side host for which you wish to filter/block outgoing traffic 
[/prefix length] ' for the specified protocol(s). 


: Note: The address specified here can be a particular address or a block of IP addresses on a 
' given network subnet. This is done by appending the associated routing "/prefix" length 
decimal value (preceded with the slash) to the addresses. A valid decimal routing prefix is 

‘ required for defining the subnet mask per CIDR notation. 
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Field Name Description 


Source Port (port Set the outgoing host port (or range of ports) for the above host (or range of hosts defined by 
or port:port) ! optional routing "/prefix" subnet mask) to define the ports profile for which egress traffic will 
‘ be filtered from reaching the specified destination(s). 


Destination IP Enter the destination IP address of a LAN side host for which you wish to filter/block outgoing 
address ! traffic for the specified protocol(s). 


: Note: The address specified here can be a particular address or a block of IP address on a given 
‘ network subnet. This is done through appending the address with the routing " /prefix " length 

: decimal value (preceded with the slash) associated. A valid decimal routing prefix is required 

‘ for defining the subnet mask per CIDR notation. 


Destination Port ; Set the destination host port (or range of ports) for the above host (or range of hosts) to define 

(port or port:port) : the destination port profile for which the filtered host egress traffic will be filtered from reach- 
‘ing the otherwise intended destination(s), e.g., to block the traffic to those ports on, say, a com- 
' puter external to the local network. 


MAC Filtering 


Your SmartRG gateway can block or forward packets based on the originating device. This MAC filtering feature is available only in 
Bridge mode. For other modes, similar functionality is available via IP Filtering. On this page, you can manage MAC filtering for your 


gateway. 
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1. Inthe left navigation bar, click Advanced Setup > Security > MAC Filtering. The following page appears. 
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Device info MAC Filtering Setup 


pe oe MAC Filtering is only effective on ATM PVCs configured in Bridge mode. 
cayere Wkeriace FORWARDED means that all MAC layer frames will be FORWARDED except 
WAN Service those matching with any of the specified rules in the following table. 
4G LTE Settings BLOCKED means that all MAC layer frames will be BLOCKED except those 
Ethernet Config matching with any of the specified rules in the following tabie. 


MAC Filtering Policy For Each interface: 

WARNING: Changing from one policy to another of an interface will cause 
all defined rules for that interface to be REMOVED AUTOMATICALLY! You 
will need to create new rules for the new policy. 


IP Filtering 
n MAC Filtering | = 
Parental Control interface Poticy Cane 
Quality of Service (pmo  |rorwaro] © | 
Changa Policy 


Choose Add or Remove to configure MAC filtering rutes. 


interface Protocol Destination MAC Source MAC Frame Direction Remove 
interface Grouping 


IP Tunnel | asa | | temos 
IPS 


ee a T P a TT ee ee. ae 


2. To modify policy settings: 
a. Review the information on the page. 


b. Once you understand the consequences of changing the policy, click the Change checkbox, and then click Change 
Policy. The policy is switched to FORWARD or BLOCKED. 


3. To add a rule, follow the instructions in "MAC Filtering". 
4. To remove a rule, click the Remove checkbox next to the rule and click the Remove button. 
5. When your changes are completed, click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface : The interface associated with an established policy rule. 


: The current/active policy type that is in place. Options are FORWARD and BLOCKED. 


Add a MAC Filtering Rule 


You cannot edit rules but you can add new ones and then remove the obsolete ones. 
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1. On the MAC Filtering page, click Add. The following page appears. 
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Device info Add MAC Filter 
aoaaa Sup Create a filter to identify the MAC layer frames by specifying at least one 
Layeré Intertace condition betow, If multiple conditions are specified, ail of them take effect. 
WAN Service Click “Apply” to save and activate the filter. 
4G LTE Settings 
Ethernet Config Protocol Type: a 
LAN Destination MAC Address: 
NAT Source MAC Address: 
Security 
IP Filtering Frame Direction: LAN<=>WAN > 
MAC Filtering WAN Interfaces (Configured in Bridge mode only) 
Parental Control 
Quality of Service be_0_0 Lipimo ¢ 
Save/Apoty 


Routing 
ONS 
DSL 


et pen Rtn, LO LO aama PAo ORI E 5 AAAA 


2. Fill in the fields, using the information provided in the following table.. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Protocol Type ‘ Select the protocol associated with the device at the destination MAC address. Options are PPPoE, IPv4/IPv6, 
‘ AppleTalk, IPX, NetBEUI, and IGMP. 


‘ Enter the MAC address of the device that is originating requests intended for the device associated with the 
‘ Destination MAC address. 


Frame Direction : Select the incoming/outgoing packet interface. 
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WAN Interfaces : Applies the filter to the selected interface(s). 


Parental Control 


In this section, you can configure the Parental Control features of your SmartRG gateway to restrict Internet access to certain hours and 
to certain URLS. 
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Time Restriction 
On this page, you can restrict Internet access to particular days and specific times for each device that accesses your gateway. 


1. Inthe left navigation bar, click Advanced Setup > Parental Control > Time Restriction and then click Add. The following page 
appears. 
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Device info Access Time Restriction 
Advanced Setup 


Layer? interface This page adds time of day restriction to a special LAN device connected to 
WAN Service the Router. The Browsers MAC Address’ automatically displays the MAC 

4G LTE Settings address of the LAN device where the browser ts running. To restrict other 
LAN device, click the "Other MAC Address” button and enter the MAC address 
of the other LAN device. To find out the MAC address of a Windows based PC, 
go to command window and type “ipconfig /all”. 


Ethernet Config 


User Name 

Parental Control Browser’ Address 

Time Restriction > Other phprs 

Uri Filter bomexnocenoc eC) 
Quality of Service 
Routing ayso the week 0 Tue Wed Thu Fri Sat Sun 
DNS Klicktoseiect 0 PJ [Ə J9 Jojolo] 
DSL 
OSL Bonding om) 
UPnP End Blocking Time (hh:mm) 4 
ONS Proxy SERN 


interface Grouping 


N n ee ee 


2. Fill in the fields using the information in the table below. 
3. Click Apply/Save. 


The fields on this page are explained in the following table. 


Field Name Description 


User Name ‘ Enter a descriptive name for this restriction. This is a free-form text 


‘ Select this option to restrict access to another device. You can view a 
‘ list of the connected devices and MAC addresses on the Device Info > 
: ARP page. 


Days of the week Select the days (Mon - Sun) for which the restrictions apply. 
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Field Name Description 


Start Time Blocking / End Time : Enter the range of time that the devices listed above are restricted 


Blocking ' from access to the Internet. Use 24-hour clock notation (00:00 - 
: 24:00). 


URL Filter 


The other side of the Parental Controls coin is URL filtering. On this page, you can exclude and include URLs as desired. Each list can 
include up to 100 addresses. 


Note: Only one Exclude list and one Include list are supported for each gateway. Unique lists are not supported for connecting devices. 


1. Inthe left navigation bar, click Advanced Setup > Parental Control > Url Filter. 
2. To block a URL: 

a. Select Exclude List. 

b. Click Add. The following page appears. 
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Device info Parental Control — URL Filter Add 
Advanced Setup 


Layer? interface Enter the URL address and port number then click “Apply/Save™ to add the entry to the 
WAN Service URL filter. 
4G LTE Settings 
Ethernet Config URL Address: 
LAN Port Number: (Defauit 80 will be applied if leave blank.) 
NAT 
Security 
Parental Controt 
Time Restriction 


i ee T a N T i T TA N T a V a T 


c. Click Apply/Save to save your settings. You are returned to the Url Filter page. 
3. To create a list of URLs to allow, select Include and repeat the above steps. 


The fields on this page are explained in the following table. 


Field Name Description 


URL Address l Enter the URL address to be included in the list. 
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Port Number: (Optional) Enter the port number associated with the URL. The default is 80. 


Quality Of Service 
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Quality of Service (QoS) enables prioritization of Internet content to help ensure the best possible performance. This is particularly use- 
ful for streaming video and audio content with minimized potential for drop-outs. QoS becomes significant when the sum of all traffic 
(audio, vid"QoS Classification", data) exceeds the capacity of the line. 


In this section, you can configure QoS settings including traffic queues, classifications (rules) and port shaping. 


QoS Config 


On this page, you can enable QoS and set the DSCP Mark classification. 


The maximum number of queues that can be configured vary by mode, as shown below. 


Maximum # of queues 


Note: Queues for Wireless (e.g., WMM Voice Priority for wlO interface) are shown only when wireless is enabled. If the WMM Advert- 
ise function on the Wireless Basic Setup page is disabled, assigning classifications to wireless traffic has no effect. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Config. The following page appears. 
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Device info QoS — Queue Management Configuration 
ginny zep If Enable QoS checkbox is selected, choose a defauit OSCP mark to 
Layer? Interface automatically mark incoming traffic without reference to a particutar 
WAN Service classifier. Click ‘Apply/Save’ button to save Ìt. 
4G LTE Settings 
Ethernet Config 
AN Note: If Enable Qos checkbox is not selected, all QoS will be disabled for 
NAT all interfaces. 
F Note: The default DSCP mark is used to mark all egress packets that do 
Parental Control not match any classification rules. 
Quality of Service 
[QoS Config | ate 
QoS Queue Config = 
QoS Classification 
QoS Port Shaping Select Default DSCP Mark NoChamgel-1) = ¢ 
Routing 
DNS 
DSL Apoly (baer | 
ee a TT i i T aa 


2. Click Enable QoS. 
The QoS Queue Management Configuration field appears where you can select the default Differentiated Services Code Point 
(DSCP) Mark classification value to be used. For a list of supported values, see "Supported DSCP Values". 
Note: If this option was already enabled and you clear the checkbox, QoS will be disabled for ALL interfaces. 


3. Click Apply/Save to save your settings. 
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Supported DSCP Values 


The DSCP marking QoS Queue Management Configuration marking on ingress packets is based on the selection you make in the Select 
Default DSCP Mark field. The selected default marking is applied automatically to all incoming packets without reference to a particular 
classification. 


Note: A default DSCP mark value of Default(000000) will mark all egress packets that do NOT match any classification. 


The following values are supported. For more information about commonly used DSCP values, refer to RFC 2475. 


cs4 
No Change(-1) CS1(001000) AF32(011100) maii 
EF 

Auto Marking(-2) AF23(010110) AF31(011010) nano 
cs5 

Default(000000) AF22(010100) CS3(011000) oaa 
cs6 

AF13(001110) AF21(010010) AF43(100110) aoo 

AF12(001100) cs2(010000) AF42(100100) 

AF11(001010) AF33(011110) AF41(100010) 


QoS Queue Config 
On this page you can configure a queue and add it to a selected Layer2 interface. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Queue Config and then click Add. The following 
page appears. 
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Device info 
Advanced Setup 
Layer? interface 


QoS -- Configuration 


This screen allows you to configure a QoS queue and add it to a selected 
layer? interface. 


WAN Service 
4G LTE Settings (Only one queue can be defined for any one interface/ precedence pair, 
Ethernet Config resulting in a maximum of three queues per interface.) 
Name: Emer Kame 
Enable: | Enable = 
Parental Control Interface: [ems ay 
Quality of Service 
QoS Contig 
| QoS Queue Config If Queue Precedence: [1857 +) (lower value, higher priority) 


QoS Classification 
QoS Port Shaping 
Routing 
ONS 
DSL 


DSL Bonding 

UPnP Minimum Rate: 1 [1-100000 Kbps] (-1 indicates no shaping) 
DNS Proxy Shaping Rate: 1 [1-100000 Kbps] {-1 indicates no shaping) 
ane Geant Shaping Burst Size: ino | [bytes] (shall be »=1600) 


+ The precedence list shows the scheduler algorithm for each precedence 


level. 
+ Queues of equal precedence will be scheduled based on the algorithm. 
- Queues of unequal precedence will be scheduled based on SP. 


“Aosivitave | 
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2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to save your settings. 


The fields on this page are explained in the following table. 


Field Name Description 


‘ Enter a descriptive name for this configuration. This is a free-form text 


Enable i Select to enable or disable a given QoS queue configured on the selected 


: interface. 


‘ Note: Only one queue can be defined for any one interface/precedence 
‘ pair, resulting in a maximum of three queues per interface. 


‘ Select the Layer 2 interface to be associated with the defined QoS queue, 
: e.g., ethO or eth4. 


Queue Precedence : (Appears when you select an interface) Select the priority value to be asso- 


' ciated with QoS queue defined. Options include levels for SP and 
: SPIWRR|WFQ. 
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Field Name Description 


: Note: Lower value = higher priority. 


Scheduler Algorithm ' (Appears when you select SP|WRR|WFQ in the Queue Precedence field) 
: Select an algorithm for data priority in queues. Options are: 


‘ Strict Priority: Allows shaping of rate and burst size for packets in queue. 


' Weighted Round Robin: Applies a fair round robin scheme weighting that 
‘is effective for networks with fixed packet sizes, e.g., ATM networks. 


Weighted Fair Queuing: Applies a fair queuing weighting scheme via allow- 
‘ing different sessions to have different service shares for improved data 
' packets flow in networks with variable packet size, e.g., PTM/IP networks. 


The following options appear only when the Queue Precedence field is set to SP|WRR|WFQ and the Scheduler 
Algorithm field is set to Strict Priority. These options are do not appear in the SR3xxn models. 


Enter the minimum shaping rate for packets in QoS queues. Options are 1 - 
: 100000 Kbps. 


‘ To specify no minimum shaping, enter -1. 


! Enter the shaping rate for packets in QoS queues. Options are 1 - 100000 
: Kbps. 
To specify no minimum shaping, enter -1. 


l Enter the shaping burst size to be applied to packets in the defined queue. 
; Options are 1600 bytes or greater. 


Minimum Rate (Appears when you select either Weighted algorithm option in the Sched- 
‘ uler Algorithm field) Enter the minimum shaping rate defined for packets 
‘in QoS queues. Options are: 1 - 100000 kbps. 


: To specify no minimum shaping, enter -1. 


Shaping Rate ; (Appears when you select either Weighted algorithm option in the Sched- 
` uler Algorithm field) Enter the shaping rate for packets in QoS queues. 
‘ Options are: 1 - 100000 Kbps. 


‘ To specify no minimum shaping, enter -1. 


Queue Weight : (Appears for the SR515ac model when you select either of the Weighted 
: algorithm options in the Scheduler Algorithm field) Enter a weight for pri- 
 oritizing this queue. Options are 1 - 63. 


WLAN Queue 
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Note: This options is available for the SR515ac gateway only. 
On this page, you can view the wireless queues and classifications. 


Note: The WMM Advertise option must be enabled before these classifications will function. This option is enabled by default. If you 
have disabled it, go to the Wireless > Basic page and clear the Disable WMM Advertise checkbox. 


In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Queue Config > Wlan Queue. The following page appears. 


SMART/RG’ SR515a¢ 


forward thinking 


QoS -- Wan Queue Setup 


Usage Note: 
Wireless queues and classifications have no effect if WMM Advertise ts disabled. The WMM Advertise function is located on the 
Wireless Basic Setup page. 


QoS Classification 


On this page, you can create traffic class rules for classifying the ingress traffic into a priority queue. You can also mark the DSCP or Eth- 
ernet priority of the packet. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Classification and then click Add. The following 
page appears. A maximum of 32 entries can be configured. 
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Device info 
Advanced Setup 
Layer? interface 
WAN Service 
4G LTE Settings 
Ethernet Config 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
QoS Config 
QoS Queue Config 
QoS Classification 
QoS Port Shaping 
Routing 
DNS 
oS 
DSL Bonding 
UPnP 
ONS Proxy 
interface Grouping 
IP Tunnel 
IPSec 
Certificate 
Multicast 
Wireless 
Dtagnostics 
Management 
Logout 


Add Network Traffic Class Rule 


This screen creates a traffic ciass rule to classify the ingress traffic into a priority 
Queue and optionally mark the DSCP or Ethernet priority of the packet. 
Click ‘Apply/ Save’ to save and activate the rule. 


Specify 
classification.) 


Specify Classification Results (A blank value indicates no operation.) 


Specify Class Queue (Required): UDOLINE DS IOELA AFAA 
+ Packets classified into a queue that exit through an interface for which the queue 
is not specified to exist, will instead egress to the default queue on the interface. 


Mark Differentiated Service Code Point (DSCP): ! : 


Mark 802.1p priority: z 

- Class non-vian packets egress to a non-vian interface will be tagged with VID 0 and 
the class rule p-bits. 

» Class vlan packets egress to a non-vian interface will have the packet p- bits re- 
marked by the class rule p-Dits. No additional vlan tag is added. 

+ Class non-vian packets egress to a vian interface will be tagged with the interface 
VID and the class rule p-bits. 

+ Class vlan packets egress to a vlan interface will be additionally tagged with the 
packet VID, and the class rule p-bits, 


imit: 
Set Rate Limit: [kbits/s} 


| AophySare | 
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2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Traffic Class Name ; Enter a descriptive name for this rule. This is a free-form text field. 


‘ Select whether this rule is processed next or last in the list of classification rules. 
Options are: 


Rule Order 


e Last: Sets this rule as the very last classification rule to be processed. 


e Null: Sets this rule as the next classification rule to be processed. 
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Field Name Description 


Rule Status ‘ Select whether this rule is active or inactive. Options are: Enable and Disable. 


(Not applicable for SR515ac models ) Select an interface. Options are: local, ethO - 
‘ eth4, and wl0. 


' (Available for SR515ac models only) Select an interface. Options are LAN, WAN 
‘and any interface already configured for your gateway. 


; Select the Ethernet interface type for this classification. Options include: IP, ARP, 
‘and IPV6 for most models, and additional options for the SR515ac model. 


Source MAC Address 
Source MAC Mask 


Destination MAC Enter the destination MAC Address and destination MAC Mask for this clas- 
Address ' sification. 


Destination MAC Mask 


‘ (Optional) Enter the Source Port applicable for this classification. You can enter a 
' range (port:port) or a single port. 


: (Optional) Enter the destination port applicable for this classification. You can 
‘enter a range (port:port) or a single port. 


Specify Class Queue (Not applicable for SR515ac models ) Select from the available queues. 


l Note: Make sure to select a queue that is configured for the interface that you 
‘ selected. If you select a queue that is not configured for the selected interface, any 
' packets classified into that queue are processed by the default queue for the inter- 


: (Available for SR515ac models only) Select the egress interface for this rule. 
‘ Options are the interfaces already configured. 


‘Available for SR515ac models only) Select the egress queue for this rule. Options 
‘are the queues already configured. 


Mark Applied Dif- Select the desired DSCP code. 
ferentiated Service Code : 
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Field Name Description 


‘ This value is inserted into the Ethernet frame and used to differentiate traffic. 
‘ Lower values assign higher priorities. Options are: 1 - 7. 


Rate Limit (Kbps) : Enter the data traffic rate limit applied for this classification. 


: For SR515ac models, this field is labeled Set Rate Limit. 
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QoS Port Shaping 
QoS Port Shaping facilitates setting a fixed rate (Kbps) for each of the Ethernet ports. 


Note: This feature is not available for the SR3xxn model. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Port Shaping. The following page appears. 
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QoS Port Shaping Setup 


QoS port shaping supports traffic shaping of Ethernet interface. 

If "Egress Shaping Rate” is set to *-1", it means no shaping is applied and “Egress Burst 
Size” will be ignored. 

If "Ingress Poticing Rate” is set to *-1", no poticing (aka rate limiting) & apptied. 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 
Interface ‘ Each entry in this column represents one of the Ethernet LAN ports on the gateway. 


: Each entry in this column identifies the function for which each physical port is con- 
' figured on the gateway. 


Shaping Rate (Kbps) (Not applicable for SR515ac models ) Enter the data rate for packets on the specified 
' Interface. Options are: 1- 1,000,000 Kbps. The default is -1 (no shaping). 


Burst Size (bytes) l (Not applicable for SR515ac models ) Enter the burst size to be applied to packets in the 
‘ defined queue. Options are 1600 bytes or greater. 


If you enter a value of -1 (disabled) in the Shaping Rate field, the value in this field is 
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Field Name 


Egress Shaping Rate 


Egress Burst Size 


Ingress Policing Rate 
(Kbps) 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Description 


: ignored. 


: (Available for SR515ac models only) Enter the data rate for packets on the specified 


‘ Interface. Options are: 1 - 1,000,000 Kbps. The default is -1 (no shaping). 


i (Available for SR515ac models only) Enter the burst size to be applied to packets in the 
‘ defined queue. Options are 1600 bytes or greater. The default is 0 (no size limit). 


; If you enter a value of -1 (disabled) in the Egress Shaping Rate field, the value in this 
' : field is ignored. 


(Available for SR515ac models only) Enter data rate for policing incoming packets in the 


‘ defined queue. The default is -1 (no policing). 
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Routing 


In this section, you can configure default gateways, static routing, policy routing and RIP settings. 


Default Gateway 


On this page, you can configure the default gateway interface list to establish access priority, that is, ilnterfaces are accessed in the 
order listed in the Selected Default Gateway Interfaces column. 


1. Inthe left navigation bar, select Advanced Setup > Routing > Default Gateway. The following page appears. 
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Device info 
Advanced Setup 
Layer? interface 


Routing -- Default Gateway 


Default gateway interface list can Nave multiple WAN interfaces served as system 


WAN Service default gateways but only one will be used according to the priority with the first 
4G LTE Settings being the highest and the last one the lowest priority if the WAN interface ts 
Ethernet Config connected. Priority order can be changed by removing all and adding them back in 
again. 
Selected Default Available Routed WAN 
Parental Control Gateway Interfaces Interfaces 
Quality of Service 
Routing 
| _Defauit Gateway | 
Static Route e 
Policy Routing s 


DSL Bonding 


DNS Proxy Select a preferred wan interface as the system default IPvó gateway. 


interface Grouping 
IP Tunnel 

IPSec 

Certificate 
Multicast 


Selected WAN Interface | NO CONFIGURED INTERFACE £ 


Apon Sare 


T a O a i Oe 


2. Select the interfaces that you want used as default gateway interfaces. Click the arrows to move your selection between the 
columns. Move the highest priority interface first, followed by the next highest priority interface, and so on. 


3. (Optional) In the Selected WAN Interface field, select an IPv6 interface. You must configure the IPv6 interface before it 
appears in this field. The default is NO CONFIGURED INTERFACE. 


4. Click Apply/Save to commit your changes. 


Static Route 
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On this page, you can configure static routes for your network. A static route is a manually configured, fixed route for IP data. You can 
enter a maximum of 32 entries. 


1. In the left navigation bar, click Advanced Setup > Routing > Static Route and then click Add. The following page appears. 
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Device info Routing -- Static Route Add 
Advanced Setup 


Enter the destination network address, subnet mask, gateway AND/OR 


Layer? Interface available WAN interface then click “Apply/Save™ to add the entry to the 
WAN Service routing table. 
4G LTE Settings 
S oe IP Version: (Pes 3 
i Destination IP address/prefix length: 
interface: pra 

Security Gateway IP Address: 
Parental Control 
Quality of Service (optional: metric number should be greater than or equal to zero) 
Routing Metric: oo 

Default Gateway ae 

L Static Route | 
Policy Routing POOPIE ee ee ee 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


IP Version ‘ Select the IP version associated with the static route you wish to create. 
l Options are: IPv4 and IPv6. 


Destination IP address/- 
prefix length 


Metric : (Optional) Establishes traffic priority/weighting. Must be equal to or greater 
: than zero (> 0). 


Policy Routing 
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Policy routing makes somewhat automated routing choices based on policies defined by a network administrator. For example, a net- 
work administrator might want to deviate from standard routing based on destination markers in the packet and, instead, forward a 
packet based on the source address. 


On this page, you can configure similar policies. 


1. In the left navigation bar, click Advanced Setup > Routing > Policy Routing and then click Add. The following page appears. 
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Device info Policy Routing Settup 
PEDO AS Enter the poticy name, policies, and WAN interface then click "Apply/ Save” 
to add the entry to the policy routing table. 
Layer? interface Note: Default gateway must be configured for IPoE connection that doesn't 
WAN Service rely on DHCP. 
4G LTE Settings 
Ethernet Config Policy Name: 
LAN 
nar Physical LAN Por 
Security LAND 
Parental Control pt 
Quality of Service ĝi E ag 
Routing — 
Default Gateway Use interface + 


Static Route Default Gateway IP: 


Apoly(bace 


i a i i OO ee A, o 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Policy Name ‘ Enter a descriptive name for this entry to the policy routing table. This is a free-form text field. 


R E ETE RE ay ew eget ana. Pica de ante eed pagers weet E ocala KA Sampara EE teenies eta ares Sree o faces Sab Syn tenor E ERRE KEE EER S 


Physical LAN Port Select a physical LAN interface for the policy route. 


PE E pS S546 bees rined eaaa R Errar Eaa EEA bebo eee eee ES EATE eee ads E REEERE A 


Source IP ‘ Enter the IP address for the source of this policy route. 


EE E e EAE S E TT E T E EE EEA EEE E E T E E E A E E 25 (erases E A E S E E E E E A A E T E E A E EA 


Use Interface ‘ Select the WAN Interface for this policy route 


ELETTEIN EREE EEEE TERP OPTTEELIE ECETTEL IEETET ESELA ETETETETTEEEET TITELE See ees se See Rete Sense TETIT EEEIEI 


Default Gateway IP: Enter the IP address of the default gateway. 


RIP (Routing Information Protocol) 
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RIP is a type of distance-vector routing protocol, which leverages hop count as a metric for routing. RIP puts a limit on the number of 
hops (maximum of 15) allowed in order to prevent routing loops. This can sometimes limit the size of networks where RIP can be suc- 


cessfully employed. 
On this page, you can configure the RIP settings. 


1. In the left navigation bar, click Advanced Setup > Routing > RIP, and then click Add. The following page appears. 
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Device info Routing -- RIP Configuration 


spy esses NOTE: RIP CANNOT BE CONFIGURED on the WAN interface which has NAT 
Layard. tartane enabled (such as PPPoE). 
WAN Service 
4G LTE Settings To activate RIP for the WAN Interface, select the desired RIP version and 


Ethemet Config 


operation and place a check in the Enabled’ checkbox, To stop RIP on the 
WAN Interface, uncheck the Enabled checkbox. Click the ‘Apply/ Save’ button 
to start/stop RIP and save the configuration. 


Parental Control 
Quality of Service 
Routing 
Default Gateway 
Static Route 
Policy Routing 


ee eA ee ee ee OO a BAA ee E A 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface l Displays a list of available WAN interfaces. Complete the line item(s) associated with the inter 
‘ face where you wish to employ RIP. 


‘ Select the version of Routing Interface Protocol you desire. Reference RFC 1058 and RFC 1453 
' for detailed information on RIP versions. Options are: 1, 2, and Both. 
‘ Select the operation mode. Options are: 


e Active: This mode listens and advertises routes. 


e Passive: This mode listens only. It does not advertise routes. 


Enabled Select to employ RIP on the displayed interface. 
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DNS 


In this section, you can configure a DNS server, dynamic DNS and static DNS. 
DNS Server 


On this page, you can input the Domain Name Server (DNS) information supplied by your service provider. 
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In the left navigation bar, click Advanced Setup > DNS > DNS Server. The following page appears. 
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Device Info DNS Server Configuration 

danny wis Select DNS Server Interface from available WAN interfaces OR enter static 
Layer2 Interface DNS server IP addresses for the system. In ATM mode, if only a single PVC 
WAN Service with IPoA or static IPoE protocol is configured, Static DNS server IP addresses 
4G LTE Settings must be entered. 
Ethernet Config DNS Server Interfaces can have multiple WAN interfaces served as system 
LAN dns servers but only one will be used according to the priority with the first 

being the higest and the last one the lowest priority if the WAN interface is 

NAT connected. Priority order can be changed by removing all and adding them 
Security back in again. 
Parental Control 
Quality of Service Select DNS Server Interface from available WAN interfaces: 
Routing Selected DNS Server Available WAN 
DNS Interfaces Interfaces 


Dynamic DNS 
Static DNS 
DSL 
DSL Bonding 
UPnP 
DNS Proxy 


Interface Grouping 
IP Tunnel 
IPSec 
Certificate 
Multicast 
Wireless 
Diagnostics 
Management 
Logout 


; 
$] ‘| 


© Use the following Static DNS IP address: 
Primary DNS server: 
Secondary DNS server: | 


Select the configured WAN interface for the IPv6 DNS server information OR 
enter the static IPv6 DNS server Addresses. 

Note that selecting a WAN interface for the IPv6 DNS server will enable the 
DHCPvé6 Client on that interface. 


Obtain IPv6 DNS info from a WAN interface: 
WAN Interface selected: NO CONFIGURED INTERFACE = 
© Use the following Static IPv6 DNS address: 


Primary IPv6 DNS server: 
Secondary IPv6 DNS server: 


Apply/Save 


2. Enter your desired settings. Click Apply/Save to commit changes. 
The fields on this page are explained in the following table. 


Field Name Description 


Selected DNS Server Interfaces : WAN service(s) selected to be your primary DNS server. 
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Field Name Description 


Available Wan Interfaces : WAN services available to be selected for the DNS server. 


WAN Interface Selected ‘ Alter this field only for IPv6 environments. 


tice te seesaw ectes chad han ceeseeee pone FE peat eee eee eee ESE CERLE PILER TETEE 


Primary IPv6 DNS Server Enter the IP address of the primary IPv6 primary DNS. 


Secondary IPv6 DNS Server ‘ Enter the IP address of the primary IPv6 primary DNS. 


Dynamic DNS 


Dynamic DNS (DDNS) automatically updates a name server in the DNS with the active DNS configuration of its configured hostnames, 
addresses or other data. Often this update occurs in real time. On this page, you can configure the settings for this feature. 


1. In the left navigation bar, click Advanced Setup > DNS > Dynamic DNS and then click Add. The following page appears. 
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Device Info Add Dynamic DNS 
Advanced Setup 
Layer? Interface This page allows you to add a Dynamic DNS address from DynDNS.org or TZO 
WAN Service or noip.com. 
4G LTE Settings = 
Ethernet Config D-DNS provider DynDNS.org + | 
E Hostname 
NAT Interface L +) 
Security 
Parental Control DynDNS Settings 
Quality of Service Username 
Routing Password | 
DNS 
DNS Server (Apply/Save_ 


OT i NV N T St, a ee Hi h 


2. Enter your desired settings. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


D-DNS provider: Select a dynamic Domain Name Server provider. 
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Field Name Description 


Hostname ‘ Enter the hostname of the dynamic DNS server. 


Interface Select the gateway WAN interface whose traffic will be pointed at the specified Dynamic DNS provider. 


eres ce ers E everere bese eco eghtes Bassas Sasa wae AE ee See baie seeeeeeeeeehieseeeetieedes ceca dc melee E EREE 


Username ‘ Enter the username for the dynamic DNS server . 


re ee a ee pare wie esac es Sranareretasaye ve ace 6 te -erahane: eseterate ace; are ere Soe ee te are eta Serer aca retapareratpie ave te-ecey ere ie 6 Soa. bie favareyere Slave ewe Barapa ates tae E 


Password ‘ Enter the password for the dynamic DNS server. 


Static DNS 


The Static DNS service allows you to resolve DNS queries on the Broadband Router by adding a static host name to the IP Address map- 
pings. On this page, you can configure up to 10 static DNS entries. 


1. In the left navigation bar, click Advanced Setup > DNS > Static DNS and then click Add. The following page appears. 


SMART/RG* 


forward thinking 


Device Info Static DNS Entry 
Advanced Setup 
Layer2 Interface 


Enter the Host Name and IP address then click "Apply/Save" . 


WAN Service 

4G LTE Settings Host Name: ] 
Ethernet Config IP Address: o 
LAN 


NAT (CApply/Save ) 
Security 


per S S e S T ee P 


2. Enter your desired settings. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Hostname : Enter the hostname of the client computer. 


EEE ETETE Peus Seah Se pace penna i Riel Shea ete ave a a a Sik ie a a a n eve aoe ave /e te ev St Seren ers “S 


Interface : Enter the IP address of the DNS server client uses to assist in resolving domain names. 
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DSL 


On this page, you can configure settings for the DSL interface. 
Caution: Altering these settings unnecessarily can result in the gateway being unable to attain DSL synchronization. 


1. In the left navigation bar, click Advanced Setup -> DSL. The following page appears. 
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Device Info DSL Settings 

Advanced Setup 
Layer2 Interface Select the modulation below. Select the profile below. 
WAN Service 
4G LTE Settings @ G.Dmt Enabled 8a Enabled 
pean Config @ G.lite Enabled @ 8b Enabled 
NAT @ 11.413 Enabled @ 8c Enabled 
Security @ ADSL2 Enabled 8d Enabled 
Parental Control AnnexL Enabled @ 12a Enabled 
Quality of Service 
Routing ADSL2+ Enabled @ 12b Enabled 
DNS O AnnexM Enabled @ 17a Enabled 
DSL @ VDSL2 Enabled 
DSL Bonding 
UPnP 
DNS Proxy USO 
Interface Grouping Enabled 
IP Tunnel 
IPSec Select the phone line pair below. 
Certificate © Inner pair 
Multicast © Outer pair 

Wireless 

Diagnostics Capability 

Management @ Bitswap Enable 

Logout O SRA Enable 

O PhyR Enable 


O ADSL PTM Mode Enable 


Inventory Management 
© Use board serial for EOC Serial Number 


( Apply/Save |{ Advanced Settings | 


2. Enter your desired settings. 
3. To configure advanced settings, see "Advanced settings”. 
4. Click Apply/Save to commit your changes. 
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Note: For the SR3xxn models, the following fields are not available: VDSL2 modulation, profile options, and USO checkbox. 


The fields on this page are explained in the following table. 


Modulation Data Transmission Rate Max Downstream Max 
(Mbps) Upstream 
(Mbps) 


: ITU-T G.992.1 standard. 


settee eee a 


: ITU-T G.991.2 standard. 4 :0.5 


teeter e eee bee re ee eee eee eee ee ee ee ee eee eee ee ee eee ne ee eee ee eee ne eee ee ee eee ee ee ee eee ee ee eee eee ee eee bee ee eee eee 


: ANSI T1.413 Issue 2 standard. 8 ae 


eee eisai ieee ee i Se iy 


: ITU-T G.992.3 standard. 12 10 


cette e ee re er ee re re ee ee ee re ree er re re ee re tre ee ee rte rere ee rere rere terre ee beet eens 


i Annex L of ITU-T G.992.3 standard which supports longer loops but with reduced | 


: transmission rates. 


VDSL2 ITU-T G.993.2 standard. 


The following table explains the maximum transaction power for each profile supported for SRG gateways. 


Parameter 8d 12a 12b 17a 


Max DS Tx Power (dBm) ‘417.5: +20.5 : 411.5: 


Se ee EEE nee a eee EET ee ee i ed 


Max US Tx Power (dBm) 


pe ee ee ee eee ee eee ee ee be ee ee ee eee ee ee ee re ee ee ee ee ee ee eee 


Min bidirectional net data rate: 50Mbps ; 68Mbps :100Mbps 


Other Settings 
Field Name Description 


Inner Pair/Outer : The RJ11 connector has four contacts. The center pair of pins is DSL1. The outer pair pins are the contacts for DSL2. 
Pair * Select which pair should be used. 
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Other Settings 


Field Name Description 


e Bitswap Enable: Enables adaptive handshaking functionality. 

e SRA Enable: Enables Seamless Rate Adaptation. 

e PhyR Enable: Enables Physical Layer Retransmission. 

e ADSL PTM Mode Enable: Enables Asymmetric Digital Subscriber Line in Packet Transfer Mode. 


Inventory Man- : Select whether to use the gateway serial number as the EOC serial number in your inventory management data- 


agement ' base. 


Advanced settings 


1. To configure the test mode, click Advanced Settings on the Advanced > DSL page. The following page appears. 
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2. Click Apply to place the gateway in test mode. 
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3. To view the ADSL tone settings, click Tone Selection. TADSL Tone Settings page appears. 


ADSL Tone Settings 


aa) a ae i) 
Mo i M B Bs M5 Me 7 Ms Mo Mi Mn Br An Bi B15 
Bi M17 Bis S19 M20 M21 M2 Az M2 M25 M2 M27 M28 29 M30 A31 


M32 433 M34 35 M36 437 B3 M39 Ba Ba Ba 43 Ba Bas ee a7 
Mas By Bs Bs Ba Bs Bs Ass Hse Bs Miss Ass Mico Mot Be: Me3 
Mea M65 Moe 67 Mos Moo M70 Min M72 M73 M74 M75 M76 M77 78 M79 
Mao Misi aa Baa Miss Miss Ases As Miss Msg Aw Aa Aa Ag M94 195 
Bw M7 Mos Bw M100) 101 A 102 4 103 A 104 4 105 A 106 A 107 M108 M109 Mi 110111 
Bin B n 114 115 116 A 117 A 118 4119 A 120 4 121 A 122 4123 A 124 49 125 4 126 4127 
M 128M 129 4130 4131 4 132 A 133 4 134 4135 A 136 4 137 A 138 EA 139 A 140 M141 EA 142 41143 
M1444) 145 4 146 4 147 A 148 4 149 4) 150 4 151 A 152 4153 4 154 155 156 157 4 158 159 
160 2) 161 B 162 2 163 S164 A 165 2 166 2 167 4) 168 3) 169 4170 171 172 173 174 175 
M176 411774) 178 4.179 A 180 A 181 4182) 183 4) 184 4 185 A 186 A 187 A 188 M189 4190 M191 
M1924 193419441195 4 196 M 197 A 198 4 199 A 200 M 201 M202 M 203 M 204 M205 M 206 M1207 
M208 1209 4 210 M211 212 4213 4214 215 M216 217 421844219 1220 4221 M4222 M223 
M2244) 225 4226 4227 422844229 4230 M231 4232 4233 23444235 236 237 M238 239 
M240 M1241 4242 M243 2444245 4246 4247 M248 4 249 4250 4251 4252 4253 44254 4255 


Check at || Cearas || Apply || Close | 


Caution: Do not modify the tones selected unless under explicit instruction from a telecommunications professional. 


4. Click Apply to commit your changes or Close to return to the previous page. 


The fields on this page are explained in the following table. 


Description 


Normal ‘ Puts the DSL PHY in test mode, sending only a Normal signal. 


No Retrain ‘The DSL PHY attempts to establish a connection as in Normal mode, but once the connection is up, it 
‘ does not retrain even if the signal is lost. 


DSL Bonding 


Note: This feature is supported only on the SR550n and SR552n models. 
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Bonding enables two DSL lines to feed the same modem and leveraging the bandwidth of both lines. Once bonded, the lines behave as a 
single, higher bandwidth connection. 


1. In the left navigation bar, click Advanced Setup > DSL Bonding. The following page appears. 
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Device Info xDSL Bonding Capability Configuration 
Advanced Setup 
Layer2 Interface Any Changes will require a reboot. 
WAN Service Bonding/Non-bonding modes - Auto controlled from within the system. 
4G LTE Settings 
Ethernet Config For any kind of xDSL bonding capability in the modem now or in the 
future, 
LAN 
NAT Please keep this configuration enabled. 


Security 
Parental Control 


æ xDSL Bonding Capabilit 
Quality of Service s E ap 


Routing 

DNS Current WAN xDSL Mode:| | 

DSL (_Save/Reboo: | 
DSL Bonding 


UPnP Onan. a et HO ten saan dh Men often pa 


2. To enable bonding, click xDSL Bonding Capability. 
3. Click Save/Reboot to commit your changes. Your gateway is rebooted. 
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UPnP 


On this page, you can enable UPnP when 3rd party devices on your LAN support this Universal Plug and Play standard. Common client 
devices include gaming consoles, IP cameras, printers and others. This feature is enabled by default. 


1. In the left navigation bar, select Advanced Setup > UPnP. The following page appears. 
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Device Info UPnP Configuration 
ee NOTE: UPnP is activated only when there is a live WAN service with 
Layer2 Interface NAT enabled. 
WAN Service 
4G LTE Settings 
Ethernet Config & Enable UPnP 
LAN 
NAT 
Toin. 


Parental Control 
Quality of Service 


De a a T aa T aa a T 


2. To disable this option, click Enable UPnP to clear the box. 
3. Click Apply/Save to commit your changes. 
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DNS Proxy 


On this page, you can configure the DNS proxy settings. A DNS proxy improves domain look-up performance for clients by creating a 
historical cache of look-ups. 


1. In the left navigation bar, click Advanced Setup > DNS Proxy. The following page appears. 
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Device Info DNS Proxy Configuration 
Advanced Setup 
Layer2 Interface @ Enable DNS Proxy 
WAN Service 
4G LTE Settings Host name of the Broadband Router: |MyRouter sd 


Ethernet Config Domain name of the LAN network: [Home 
LAN 


NAT CEER 
Security Apply/Save 


Parental Control 
Quality of Service 
Routing 


O a OY N a i I T a T a O 


2. If not already selected, click Enable DNS Proxy. 
The Host name and Domain Name fields appear. 


3. Enter the host name of the broadband router and the domain name of the LAN network. 
4. Click Apply/Save to commit your changes. 
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Interface Grouping 


You can create an interface group to map local interfaces to WAN interfaces. A typical application for this feature is assigning IPTV STBs 
to a WAN interface. 


1. In the left navigation bar, click Advanced Setup > Interface Grouping and then click Add (below the table). The following page 
appears. 
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Device Info a | ] 


Advanced Setup Shared WAN Interface: O 
Layer2 Interface 


WAN Service Grouped WAN Interfaces Available WAN Interfaces 
4G LTE Settings 
Ethernet Config 
LAN 
NAT 
Security 
Parental Control 
Quality of Service 
Routing 
DNS 
DSL 
DSL Bonding Grouped LAN Interfaces Available LAN Interfaces 
UPnP 
DNS Proxy 
IP Tunnel 
IPSec 
Certificate 
Multicast 

Wireless 

Diagnostics 

splasyeers Automatically Add Clients 


Logout With the following DHCP 
Vendor IDs 


br_0_0_1/ptm0 
No Interface/None 


a 


2. To create a new interface group, enter a unique Group Name, then proceed with either step 3 (dynamic) or step 4 (static) 
below. 
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3. If this new grouped interface is to share the WAN interface, click Shared WAN Interface. Not selecting this option this will 
cause the WAN interface you select to be removed from any other interface groups. 
Important: If a vendor ID is configured for a specific client device, make sure to reboot the client device attached to the gate- 
way to allow it to obtain an appropriate IP address. 


4. Map the ports for the WAN or LAN interface: 
a. Select an interface from the applicable Available Interface list. 


Add it to the Grouped Interface list by clicking the arrow to create the required mapping of the ports. Hold down the 
Shift key to select multiple interfaces. 
Note: Depending on the WAN interface configuration, these clients may obtain public IP addresses. 


5. To automatically add LAN clients (such as set-top boxes) to a WAN Interface in the new group, enter the DHCP vendor ID 
string. You can add up to 16 vendor IDs. 
When you configure a DHCP vendor ID string, any DHCP client request that includes this vendor ID is denied an IP address from 
the local DHCP server (DHCP option 60). 


Click Apply/Save. Your changes take effect immediately. 
7. Toremove a grouping, select the grouping and click Remove. You can only remove groupings that you create. 


IP Tunnel 


IP Tunneling is typically used as a means to establish a path between two independent networks. Your SmartRG gateway supports con- 
necting islands of IPv6 networks across the IPv4 internet or IPv4 in IPv6 as well. 


On this page, you can configure IP tunnel settings. 


Note: For IPv6inIPv4, only 6rd configuration is supported. For IPv4inIPv6, only DS-Lite configuration is supported. 


IPv6inIPv4 


On this page, you can configure the IPv6inIP4 settings. 
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1. In the left navigation bar, click Advanced Setup > IP Tunnel > IPv6inIPv4 and then click Add. The following page appears. 
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Device Info IP Tunneling -- 6in4 Tunnel Configuration 
Advanced Setup 
Layer2 interface Currently, only 6rd configuration is supported. 
WAN Service Tunnel Name (MyTunsel_ — 
4G LTE Settings Mechanism: | 6RD : 
Ethernet Config Associated WAN Interface: | 3 
Associated LAN Interface: | LAN/brO $ 


@ Manual © Automatic 


Parental Control IPv4 Mask Length: 
Quality of Service 6rd Prefix with Prefix Length: 
Routing Border Relay IPv4 Address: 
DNS 
OSL 
DSL Bonding 
UPnP 
DNS Proxy 
interface Grouping 
IP Tunnel 
Pv4iniPvé 
i pa O O T OO a a OE a T 


Lanoy (Save, 


2. Enter a Tunnel Name. 
3. Select the WAN and LAN interfaces associated with the tunnel you wish to establish. 


4. IPv4 Mask Length, 6rd Prefix with Prefix Length and Border Relay IPv4 Address can be configured automatically. To configure 
these settings manually, select Manual under Associated LAN Interface and enter the appropriate values. 


5. Click Apply/Save to commit your changes. 


IPv4inIPv6 


On this page, you can configure the IPv4inIP6 settings. 
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1. In the left navigation bar, click Advanced Setup > IP Tunnel > IPv6inIPv4 and then click Add. The following page appears. 
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Device info IP Tunneling -- 4in6 Tunnel Configuration 
ee Currently, onty DS-Lit tion is 
Layer? interface y, only e configura supported. 
WAN Service Tunnel Name ‘My Tunnel 
4G LTE Settings Mechanism: OS-Lite ry 
Ethernet Config Associated WAN interface: leaner : 
Associated LAN Interface: | LAN/brO = 
@ Manual © Automatic 
AFTR: 
Parental Control ( AppiyiSave ) 


Quality of Service 


Routing 

DNS 

DSL 

DSL Bonding 

UPnP 

DNS Proxy 

interface Grouping 

IP Tunnet 
IPv6iniPv4 


i i OO ee Ee a E m, A 


Note: Currently, only the DS-Lite Mechanism is supported. Consult RFC6333 for further information regarding DS-Lite. 
2. Enter a Tunnel Name 
3. Select the LAN and WAN interfaces associated with the tunnel you wish to establish. 


4. AFTR (Address Family Transition Router) may be configured automatically. To configure AFTR manually, select Manual under 
Associated LAN Interface and enter the appropriate values. 


5. Click Apply/Save to commit your changes. 
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IPSec 


Internet Protocol Security is a protocol for securing communications by packet level encryption and authentication. 
On this page, you can enable and remove connections, or edit existing connections. 
1. In the left navigation bar, click Advanced Setup > IP Sec and then click Add New Connection. The following page appears. 
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Device info IPSec Settings 
Advanced Setup a — 
Layer? Interface IPSec Connection Name new connection 
WAN Service o 
4G LTE Settings IP. Version: Livs s] 
Pihernot Contig Tunnel Mode ep =) 
Local Gateway Interface: | Select interface =) 
Parental Control Remote IPSec Gateway Address boss 
Quality of Service 
Routing Tunnel access from local IP addresses | Subnet : 
DNS IP Address for VPN (0.0.0.0 
DSL 
Mask or Prefix Length 255.255.255.0 
DSL Bonding 
Tunnel access from remote IP addresses | Subnet $ 
nS set 7 IP Address for VPN TT 
interface Grouping Sr 
iP Tunnel Mask or Prefix Length 255.255.255.0 
IPv6iniPv4 aaa 
IPv4inIPv6 Key Exchange Method on O 
IPSec Authentication Method | Pre-Shared Key + 
Certificate Pre-Shared Key wey 
Multicast Perfect Forward Secrecy | Disable = 
Wireless = 
Advanced IKE Settings | Show Advances Settings 


Diagnostics 
Management 
Logout 


| Aopiy/Save | 


2. Enter your connection details by completing the appropriate fields. 
3. If desired, click Advanced IKE Settings to select Phase 1 and Phase 2 specific parameters. For detailed information about these 
settings, see "Advanced IKE Settings”. 


4. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 
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Field Name Description 


IPSec Connection Name _ :A free form text field. Enter a descriptive name for this connection 
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IP Version : Select the IP version environment associated with your infrastructure. Options are IPv4 and IPv6. 
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Tunnel Mode : Select the encapsulation method to be used. Options are: 


e AH: Use this mode to encapsulate a packet with AH and IP headers. For authentication, the entire 
packet is signed. 

e ESP: Use this mode to encapsulate a packet with ESP and IP headers. An ESP trailer is added to 
the packet for authentication and integrity. 


Local Gateway Interface : Select the WAN connection to be associated with this tunnel. 
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Remote IPSec Gateway : Enter the WAN IP for this tunnel. 


Tunnel Access From Local IP: Select IP information for site A and B. Options are: 


Addresses e Subnet: Allows access to the entire LAN. 


e Single Address: For single host, select this option. 
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‘ Enter the IP address for local access. 


Tunnel Access From ‘ Select IP information for site A and B. Options are: 


Remote IP Addresses e Subnet: Allows access to the entire LAN. 


e Single Address: For single host, select this option. 
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‘ Enter the IP address for remote access. 


The key-exchange method to be used for IPSec. Options are: 


e Auto(IKE): This method uses the negotiated key-exchange method for IPSec. This is the default 
and recommended for best results. 


e Manual: This nethod requires that you configure the details. 


Authentication Method : Select the method by which the remote end will authenticate. 


e Pre-Shared Key: A key is distributed to authorized users for logging into the system. Enter the 
key in the Pre-shared Key field. 


e Certificate (x.509): A certificate is used for authentication. Select the certificate file in the Cer- 
tificate field that appears. 


Perfect forwarding Secrecy : This setting determines whether a session key derived from a set of long-term keys is compromised if 
* one of the long-term keys in the set is compromised. 


e Enable: Prevents long-term key from being compromised. 
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Field Name Description 


e Disable: Permits long-term keys to be compromised. 


Advanced IKE Settings 
You can configure advanced IKE settings if desired. 


1. On the IPSec Settings page, click Show Advanced IKE Settings to display the Phase 1 and Phase 2 fields. 
2. Fill in the fields, using the information in the table below. 


Field Name Description 
‘ Select a mode. Options are Main and Aggressive. 


‘ Select the encryption algorithm. Options are 3DES , AES - 
: 128, AES-192, and AES-256. 


Select Diffie-Hellman Group for : Select the D-H group. Options are 768bit - 8192bit. The 
Key Exchange ' default is 1024bit. 


Key Life Time : Enter the number of seconds that a key is valid. The default 
‘is 3600 seconds. 


3. Click Apply/Save to commit your changes. 


Certificate 


On this page, you can configure certificates for the gateway. You can use Local and Trusted CA certificates on this gateway. 


Local 


Local certificates are used to identify the gateway to other users. On this page, you can create a new certificate request locally and have 
it signed by a certificate authority, or you can import an existing certificate. 


For additional info regarding Public Key Infrastructure (PKI), refer to ITU-T X.509. 


1. In the left navigation bar, click Advanced Setup > Certificate > Local and then click Create Certificate Request. The following 
page appears. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


SMART/RG’ 


forward thinking 


Device Info Create new certificate request 


Advanced Setup To generate a certificate signing request you need to include Common Name, 
Layer2 Interface Organization Name, State/Province Name, and the 2-letter Country Code for 
WAN Service the certificate. 
4G LTE Settings A 
Ethernet Config Certificate Name: 

LAN Common Name: 
Organization Name: 

NAT State/Province Name: 

Security Country/Region Name: [ US (United States) : 

Parental Control 


Quality of Service 


Routing 

DNS 

DSL 

DSL Bonding 

UPnP 

DNS Proxy 

Interface Grouping 

IP Tunnel 

IPSec 

Certificate 
[Local | 


Trusted CA 
Multicast OI aa a er tein E T T E O tert, O T Mm 


Apply | 


2. Enter your connection details by completing the appropriate fields. For more information about certificates, refer to the ITU 
X.509 standard. 


3. Click Apply to complete the request. 


The fields on this page are explained in the following table. 


Field Name Description 
Certificate Name :A free-form text field used to describe the intended use of the certificate. 


Common Name ‘ Enter the IP address (in dotted decimal notation), domain name or email address in 
the field provided. The domain name or email address is for identification purposes 
‘and is a free-form text field. 


Organization Name ; A free form text field. Typically, this is the name of the company creating the 
' request. 


Country/Region Select the country or region in which this certificate will be employed. 
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4. Toimport a certificate and the corresponding private key, click Import Certificate. The following page appears. 
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Device Info Import certificate 

Advanced Setup 
Layer2 Interface 
WAN Service Certificate —————————— 
4G LTE Settings Name: ——— 
Ethernet Config | [is bee BEGIN CERTIFICATE----- 

<insert certificate here> 

LAN } } } | 2 END CERTIFICATE---~~ 

NAT 

Security 

Parental Control 

Quality of Service 

Routing Certificate: 

DNS 

DSL 

DSL Bonding 

UPnP 

DNS Proxy 

Interface Grouping 


IP Tunnel | 7 re BEGIN RSA PRIVATE KEY----- 
<insert private key here> 
_——l END RSA PRIVATE KEY----~ 


Enter certificate name, paste certificate content and private key. 


Multicast 
Wireless Private Key: 
Diagnostics 
Management 
Logout 


5. Inthe Certificate Name field, type "cpecert”. 
6. Paste the Certificate details between the BEGIN and END markers. 
7. Paste the Private Key information between the BEGIN and END markers. 
8. Click Apply to implement this certificate. 
Trusted CA 


On this page you import and store up to four trusted certificates. Trusted Certificates are used to identity other gateways to your gate- 
way as a trusted source. 


1. In the left navigation bar, click Advanced Setup > Certificate > Trusted CA and then click Import Certificate. The following 
page appears. 
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Device Info Import CA certificate 

Advanced Setup 
Layer2 Interface 
WAN Service Certificate 
4G LTE Settings Name: ad 
Ethernet Config | SO BEGIN CERTIFICATE----- 
LAN O éf END CERTIFICATE----- 
NAT 
Security 
Parental Control 
Quality of Service 
Routing Certificate: 
DNS 
DSL 
DSL Bonding 
UPnP 
DNS Proxy 
Interface Grouping 
IP Tunnel 
IPSec 
Certificate 

Local 


Multicast 


Enter certificate name and paste certificate content. 


Apply 


ON a Oe Oe 


2. Inthe Certificate Name field, type "acscert", and then paste the certificate details between the BEGIN and END markers. 
3. Click Apply to commit this certificate. 


After you add one certificate, a Remove button appears on the Trusted CA landing page. Click this button to remove the current cer- 
tificate and replace it with a new one. 
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Multicast 


Multicast methodology is used for applications shipping information simultaneously to multiple destinations. The most common scen- 
ario is Internet television and other streaming media. In IP Multicast, the implementation occurs at the IP routing level, where routers 
create the most efficient distribution paths for packets sent to a destination. 


On this page, you can configure the multicast settings. 


1. In the left navigation bar, select Advanced Setup > Multicast. The following page appears. 
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Device info 
Advanced Setup Multicast Precedence: Osabie =| lower value, higher priority 
Layer? interface 
yetghtnaphigre IGMP Configuration 
4G LTE Settings 
Ethernet Config Enter IGMP protocol configuration fields if you want modify Gefault values shown below. 
Default Version: i 
Query Interval: c3 
Query Response interval. c 
Last Member Query Interval CE = 
Robustness Vaive: g 
Maximum Maåticest Groups; CJ 
Maximum Mifticast Data Sources (for IGMP}: (1-24); 9 
Maximum Mtticast Group Members: ad 
Fast Leave Enable: = 
OSL Bonding LAN to LAN (Intra LAN) Multicast Enable: 
UPnP Membership Join immediate (IPTV): 
DNS Proxy 
Interface Grouping 
IP Tunnel MLD Config ration 
IPSec 
Certificate Enter MLD protocol (IPvé Multicast) configuration fields if you want modify default values shown below. 
pe Defautt Version: i 
Query interval: CE 
Query Response interval: B 
Last Member Query interval CJ 
Robustness Value: 2 
Maximum Multicast Groups: c 
Maximum Multicast Data Sources (for midv3): 2 
Maximum Mesticast Group Members: G] 
Fast Leave Enable: z 


LAN to LAN [intra LAN) Multicast Enabie: 


2. Update or complete the necessary fields. The same fields are provided for both IGMP and MLD configuration. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Multicast Precedence Select whether IGMP packets are given priority handling and at what level. 
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Field Name Description 


‘ Options are: 


e Enable: IGMP packets are prioritized using the multicast precedence 
value. The lower the multicast precedence value, the higher that IGMP 
packets will be placed in the queue. 


Disable: IGMP packets are not prioritized. 


Multicast Strict Grouping : “(Available for SR515ac models only) Select whether strict grouping is applied to 
Enforcement ‘ IGMP packets. Options are Enable and Disable. 


Query Interval ‘ The interval at which the multicast router sends a query messages to hosts, 
; expressed in seconds. 


‘ If you enter a number below 128, the value is used directly. If you enter a number 
128, it is interpreted as an exponent and mantissa. 


Query Response Interval : Upon receiving a query packet, a host begins counting down seconds, from a ran- 
‘dom number. When the timer expires, the host sends its report. 


‘ Enter the maximum number of seconds that a host can pick to count down from. 
‘ The value must be greater than the Query Interval. If using IGMP v1, this value is 
: fixed at 10 seconds. 


Last Member Query Inter-: Enter the maximum response time within which the host must respond to the Out 
val ‘ of Sequence query from the router. The default is 1000ms. 


IGMP uses this value when the router receives an IGMPv2 Leave report indicating 
' at least one host wants to leave the group. Upon receiving the Leave report, the 

; router verifies whether the interface is configured for IGMP Immediate Leave. If 

‘ not, the router sends the out-of-sequence query. 
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Robustness Value ‘ Enter the value representing the complexity of the query. The greater the value, 
‘ the more robust the query. Options are: 2 - 7. 


Maximum Multicast ‘ Enter the maximum number of groups allowed. 
Maximum Multicast Data : Enter the maximum number of data sources allowed. Options are: 1 - 24. 
Sources (for IGMP v3) 


Maximum Multicast ‘ Enter the maximum number of multicast groups that can be joined on a port or 
Group Members ‘ group of ports. 


Fast leave ‘ Select whether the IGMP proxy removes group members immediately without 
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Field Name Description 


: sending a query. Options are: 
e Enabled: Group members are removed immediately. 


e Disabled: Group members are removed after a query is sent anda 
response received.. 


LAN to LAN (Intra LAN) l (Not applicable for SR515ac models) Click to permit a multicast data source on the 
Multicast l LAN side and enable IGMP snooping. 


Membership Join Imme- i Select whether clients should send join reports. Options are: 


diate (IPTV) e Enabled: No join report is sent; join is faster by a few milliseconds. 


e Disabled: The client sends a join report. 


WIRELESS 


In this section, you can configure the wireless interface settings for your gateway, including basic and advanced settings, MAC filtering, 
and wireless bridging. 


Note: For the SR515ac model, the pages in this section are provided for both wireless bands, once for the 2.4 Ghz band and once for the 
5 Ghz band. The fields are the same for both bands. 


Basic 


On this page, you can configure basic features of the Wi-Fi LAN interface. You can enable or disable the Wi-Fi LAN interface, hide the 
network from active scans, set the Wi-Fi network name (also known as SSID) and restrict the channel set based on country requirements. 
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1. In the left navigation bar, click Wireless > Basic. The following page appears. 
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Device info Wireless -- Basic 
eee This page allows you to configure basic features of the wireless LAN interface. You can enable 
easa or disable the wireless LAN interface, hide the network from active scans, set the wireless 
| Basic | network name (also known as SSID) and restrict the channel set based on country requirements. 
Security Click “Apply/Save™ to configure the basic wireless options. 
MAC Filter 
Wireless Bridge # Enable WiFi Button 


hanrenced @ Enable Wireless 
Station info 


Enable Wireless Hotspot2.0 [WPA2 ts required!) 
Hide Access Point 
Clients isolation 


Disable WMM Advertise 

Enable Wireless Multicast Forwarding (WMF) 
SSID: Smetana 

85510: 00:23:6A:50:80:AB 

Country: UNITED STATES 

Max Clients: 173 


tsotate og Enable Enable Max 
Clients Advertise WMF HSPOT Clients 


= ssa 
e pape je ee 
e paf fe je fe [w p] 


SSID Hidden Bss 


2. Modify the settings as desired, using the information provided in the table below. The table at the bottom of the page lists the 
guest/virtual access points defined for your gateway. If desired, you can define up to three virtual access points for guest use. 
3. Click Apply/Save to commit your settings. 


The fields on this page are explained in the following table. 


Field Name Description 


Enable Wi Fi Button ; (Not applicable to the SR350n model) Click to enable the gateway's Wi-Fi 


Enable Wireless Hotspot2.0 : Click to enable wireless Hotspot2.0. (WPA2 is required!) 
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Field Name Description 


‘ Hotspot 2.0 is focused on enabling a mobile device to automatically dis- 
‘ cover Wi-Fi access points that have a roaming arrangement with the user's 
‘ home network and then connect securely. 


‘ Click to prevent LAN client devices from communicating with one another 
‘on the wireless network. 


Click to stop the wireless from advertising Wireless Multimedia (WMM) 
: functionality. WMM provides basic Quality of Service (QOS) for applic- 
‘ ations. 


Enable Wireless Multicast : Click to enable Wireless Multicast Forwarding (WMF). Multicast traffic is for- 
Forwarding ‘ warded across wireless clients. 


: Enter the Basic Service Set Identifier (BSSID) to provide the MAC address 
' assigned to the wireless router. 


: (Available on SR515ac models only) Enter the revision number of the reg- 
‘ulations being followed for the selected country. The default is 0. 


‘ Enter the maximum number of clients that can access the route wirelessly. 
Options are 1 - 16. 


Click to stop the wireless from advertising Wireless Multimedia (WMM) 
' functionality. 


Enable HSPOT : Click to enable wireless Hotspot2.0 
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Field Name Description 


BSSID i Displays the Basic Service Set Identifier or N/A. 


Security 


On this page, you can configure security features of the wireless LAN interface, either manually or via Wi-Fi Protected Setup (WPS). 


Note: When WPS is enabled, the STA PIN and Authorized MAC fields appear. If both of these fields are empty, PBC becomes the 
default value. If Hide Access Point is enabled or the MAC filter list is empty with "Allow" chosen WPS2 will be disabled. 


1. In the left navigation bar, click Wireless > Security. The following page appears. 


Note: For SR515ac models, go to the Wireless > 2.4 Ghz Band or 5 Ghz Band pages. 
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Device info Wireless -- Security 
POR ZENO This page allows you to configure security features of the wireless LAN interface. 
You may setup configuration manually 
Basic OR 
| Security | through WiFi Protected Setup{WPS) 
MAC Filter Note: When both STA PIN and Authorized MAC are empty, PBC is used, If Hide 
3 Access Point enabled or Mac filter list is empty with “allow” chosen, WPS2 will be 
Wireless Bridge disabled 
Advanced 
Station info 
WPS Setup 
Enable WPS Enabled = 


Add Client (This feature is available only when WPA-PSK(WPS1), WPAZ PSK or 
OPEN mode ts configured) 
Enter STA PIN © Use AP PIN AE imaiwe 
Set WPS AP Mode Configured 
Setup AP (Configure all security settings with an external registar) 


Device PIN nao Heip 
SeN FO i T aa Taa "T ae CO aain VO a PPN 


2. Modify the settings as needed, using the information provided in the field description table. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Enable WPS l Select to enable Wi-Fi Protected Setup. Options are: Enabled and Disabled. 
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Field Name Description 


Add Client : (Not applicable for SR515ac models) Select the method for generating the WPS PIN. Options 
‘ are: Enter STA PIN and Use AP PIN. 


: To add an enrollee station, click Add Enrollee. 


! Note: If the PIN and Set Authorized Station MAC fields are left blank, the PBC (push-but- 
‘ ton) mode is automatically made active. 
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Set Authorized Sta- (Not applicable for SR515ac models) When manually pairing via WPS, enter the MAC address 
: of the client device you are trying to connect. 


Set WPS AP Mode : Select how security is assigned to clients. 


e Configured: The gateway assigns security settings to clients. 


e Unconfigured: An external client assigns security settings to the gateway. 


Network Authentic- Select the desired network security authentication type. Options are: Open, Shared, 802.1X, 
ation ‘ WPA, WPA-PSK, WPA2, WPA2-PSK, Mixed WPA2/WPA, and Mixed WPA2/WPA-PSK. 


The fields shown in the Manual Setup AP section of the page vary based on the network authentication method that you select. The vari- 
ations are explained in the following sections: 


e "Open and Shared Network Authentication" 
e "802.1X Network Authentication" 


e "WPA Network Authentication" 

e "WPA-PSK Network Authentication" 

e "WPA2 and Mixed WPA2/WPA Network Authentication" 

e "WPA2-PSK and Mixed WPA2/WPA-PSK Network Authentication" 


Open and Shared Network Authentication 


The same configuration fields apply for both Open and Shared authentication types. However, WPS may not be used with the Shared 
method. 


1. On the Wireless > Security page, select Open or Shared in the Network Authentication field. The following fields appear. 
Note: For SR515ac models, go to the Wireless > 2.4 Ghz Band or 5 Ghz Band pages. 
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Manual Setup AP 


You can set the network authentication method, selecting data encryption, 
specify whether a network key is required to authenticate to this wireless 
network and specify the encryption strength, 


Click “Apply /Save” when done. 

Select SSID: _SMARTRG +: 

Network Authentication: Open $ 

WEP Encryption: trabled 

Encryption Strength: 128-bie : 

Current Network Key: is 

Network Key 1: SrertAGwiretes 

Network Key 2 omit 

Network Key 3: endi) j 

Network Key 4: full) 
Enter 13 ASCII characters or 26 hexadecimal digits 
for 128-bit encryption keys 
Enter 5 ASCH characters or 10 hexadecimal digits for 
64-bit encryption keys 


2. Fill in the fields, using the information in the field description table below. 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


Select SSID : Select the SSID of the wireless network to which this security configuration will apply. 
WEP Encryption : Select to enable Wired Equivalent Privacy (WEP) mode. Options are Enabled and Disabled. 
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Encryption (Appears when WEP Encryptionis set to Enabled) Select the length of the encryption method. 


' Options are 128-bit and 64-bit. 128-bit is the more robust option for security. 


(Appears when WEP Encryptionis set to Enabled) Select which of the four keys is presently in 
' effect. 


Network Key 1-4: (Appears when WEP Encryption is set to Enabled) Enter up to four encryption keys using the 
‘ on-screen instructions to achieve the desired security strength (128-bit or 64-bit). 


802.1X Network Authentication 


1. On the Wireless > Security page, select 802.1X in the Network Authentication field. The fields shown below appear. 


Note: For SR515ac models, go to the Wireless > 2.4 Ghz Band or 5 Ghz Band pages. 
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Aavanced Setup 
Wireless Manual Setup AP 
Saek You can set the network authentication method, selecting data encryption, 
Security specify whether a network key is required to authenticate to this wireless 
MAC Filter network and specify the encryption strength. 
Wireless Bridge Click "Apply/Save” when done. 
Sonstiges Select SSID: ‘SwaaTRG = 
Station Info 
Otagnostics Network Authentication: 
RADIUS Server IP Address: 0.9.0.0 
RADIUS Port: n 
RADIUS Key: -e 
WEP Encryption: Enabled + 
Encryption Strength: 128-bit $ 
Current Network Key: 23 
Network Key 1: SrertRGWirwiew 
Network Key 2: na 
Network Key 3: (mal 
Network Key 4: iy 
Enter 13 ASCII characters or 26 hexadecimal digits 
for 128-bit encryption keys 
Enter 5 ASCH characters or 10 hexadecimal digits for 
64-bit encryption keys 


2. Fill in the fields, using the information in the field description table below. 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


RADIUS Server IP_: Enter the IP address of the RADIUS (Remote Authentication Dial In User Service) server asso- 
‘ ciated with your network. 


‘ Enter the port number for the RADIUS server. Port 1812 is the current standard for RADIUS 
; authentication per the IETF RFC 2865. Older servers may use port 1645. Options are 1 - 


: (Optional) Enter the encryption key (if required) needed to authenticate to the specified 


‘ RADIUS Server. 


: (Appears when WEP Encryption is set to Enabled) Select the length of the encryption method. 
‘ Options are 128-bit and 64-bit. 128-bit is the more robust option for security. 


Current Network : (Appears when WEP Encryption is set to Enabled) Select which of the four keys is presently in 
Key ' effect. 
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Field Name Description 


Network Key 1-4 : (Appears when WEP Encryption is set to Enabled) Enter up to four encryption keys using the 
' on-screen instructions to achieve the desired security strength (128-bit or 64-bit). 


WPA Network Authentication 


WPA authentication requires the same set of parameters as the 802.1X authentication method plus two additional parameters: WPA 
Group Rekey Interval and WEP Encryption. 


Note: This option is not available on SR515ac models. 


1. On the Wireless > Security page, select WPA in the Network Authentication field. The fields shown below appear. 


Site i sein ade i it i ee a a D a a aa 
Manual Setup AP 
You can set the network authentication method, selecting data encryption, 
specify whether a network key is required to authenticate to this wireless 
network and specify the encryption strength. 
Click “Apply/Save” when done. 
Select SSID: SMARTRG + 
Network Authentication: WPA 3 


WPA Group Rekey Interval: o 
RADIUS Server IP Address: 9.0.00 


RADIUS Port: DH 

RADIUS Key: 

WPA Encryption: 

WEP Encryption: Disabled = 
Apply bon 


2. Fill in the fields, using the information in the field description table below and in "802.1X Network Authentication". 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


WPA Group Rekey ; The frequency at which the gateway automatically updates the group key and sends it to con- 
Interval ‘nected LAN client devices. Options are: 1 - 65535 seconds. 


WPA/WAPI Encryp-: Select the encryption standard. This field displays the option most compatible with the selec- 
tion ‘ ted network authentication method. Options are: 


e AES: Advanced Encryption Standard. 
e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol). 


WPA-PSK Network Authentication 
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Note: This option is not available on SR515ac models. 


1. On the Wireless > Security page, select WPA2-PSK in the Network Authentication field. The following fields appear. 


ge OS Neg ey eee FO Rg ie ewe wa 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 
specify whether a network key is required to authenticate to this wireless 
network and specify the encryption strength. 

Click “Apply /Save” when done. 


Select SSID: SMARTRG + 
Network Authentication: (wraz -Pse =) 
WPA passphrase: —  sssresressssrenseas Click here to display 
Use base MAC address as WPA passphrase 
WPA Group Rekey Interval: o E 
WPA Encryption: ass 
WEP Encryption: Disabied 
Aor bon 


2. Fill in the fields, using the information in the field description table below. 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


Select SSID Select the SSID of the wireless network to which this security configuration will apply. 


epvcsweseeseS EE ee eee (pow sa est ese twees see ees cea bee eos eee wee be Sheets ee eeeeaae Bee ee aa EE bed eu ee wee 55S Cee eee eee Seeewee-s 


WPA/WAPI passphrase : Enter the security password to be used by this security configuration. 


Use base MAC address as Select whether to allow the base MAC address to be substituted for the password (in lieu of manually 
WAP/WAPI Passphrase entering a password). When this box is checked, the WPA/WAPI passphrase field is ignored. 


WPA Group Rekey Interval: The frequency at which the gateway automatically updates the group key and sends it to connected LAN 
client devices. Options are: 1 - 65535 seconds. 


WPA/WAPI Encryption Select the encryption standard. This field displays the option most compatible with the selected network 
authentication method. Options are: 


e AES: Advanced Encryption Standard. 
e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol). 


WEP Encryption Select to enable Wired Equivalent Privacy (WEP) mode. Options are Enabled and Disabled. 


Encryption Strength (Appears when WEP Encryption is set to Enabled) Select the length of the encryption method. Options are 
128-bit and 64-bit. 128-bit is the more robust option for security. 
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Field Name Description 


Current Network Key (Appears when WEP Encryption is set to Enabled) Select which of the four keys is presently in effect. 


Network Key 1-4 ‘ (Appears when WEP Encryption is set to Enabled) Enter up to four encryption keys using the on-screen 
‘ instructions to achieve the desired security strength (128-bit or 64-bit). 


WPA2 and Mixed WPA2/WPA Network Authentication 
The same configuration fields apply for both WPA2 and Mixed WPA2/WPA authentication methods. 


1. On the Wireless > Security page, select WPA2 or Mixed WPA2/WPA in the Network Authentication field. The following fields 
appear. 
Note: For SR515ac models, go to the Wireless > 2.4 Ghz Band or 5 Ghz Band> pages. 
ee re eee ae ee 
Manual Setup AP 


You can set the network authentication method, selecting data encryption, 
specify whether a network key is required to authenticate to this wireless 


MAC Filter network and specify the encryption strength. 
Wireless Bridge Click “Apply/Save™ when done. 
sedsvdagnt Select SSID: SMARTRG = 
Station Info a 
ee Network Authentication: (WAZ) 
Management 
Logout WPA2 Preauthentication: Disabled : 


Network Re-auth Interval: mow 
WPA Group Rekey interval: o 
RADIUS Server IP Address: 0.9.0.0 


RADIUS Port: “an 

RADIUS Key: = 

WPA Encryption: As. 8 
WEP Encryption: Disabled + 


2. Fill in the fields, using the information in the field description table below. 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


Select SSID : Select the SSID of the wireless network to which this security configuration will apply. 


Protected Man- : (Available for SR515ac models only) Select whether to enable this option. Options are 
agement Frames : Enabled and Disabled, The default is Disabled, 


WPA2 Preau- : Select whether clients can pre-authenticate with the gateway while still connected to 
thentication * another AP. Options are Enabled and Disabled. 
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Field Name Description 


Network Re-Auth Inter-: Enter the interval at which the client must re-authenticate with the gateway. Options 
' are: 0-2,147,483, and 647 seconds. 


WPA Group Rekey The frequency at which the gateway automatically updates the group key and sends it 


Interval : to connected LAN client devices. Options are: 1 - 65535 seconds. 


: Enter the IP address of the RADIUS (Remote Authentication Dial In User Service) 
‘ server associated with your network. 


: Enter the port number for the RADIUS server. Port 1812 is the current standard for 
: RADIUS authentication per the IETF RFC 2865. Older servers may use port 1645. 
: Options are 1 - 65535. 


: (Optional) Enter the encryption key (if required) needed to authenticate to the spe- 
‘ cified RADIUS Server. 


Select the encryption standard. This field displays the option most compatible with the 
: selected network authentication method. Options are: 
e AES: Advanced Encryption Standard. 
e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol). 


(Appears when WEP Encryption is set to Enabled) Select the length of the encryption 
: method. Options are 128-bit and 64-bit. 128-bit is the more robust option for security. 


(Appears when WEP Encryptionis set to Enabled) Select which of the four keys is 
presently in effect. 


Network Key 1-4 : (Appears when WEP Encryptionis set to Enabled) Enter up to four encryption keys 
: using the on-screen instructions to achieve the desired security strength (128-bit or 64- 
: bit). 


WPA2-PSK and Mixed WPA2/WPA-PSK Network Authentication 
The same configuration fields apply for both WPA2-PSK and Mixed WPA2/WPA-PSK authentication methods. 


1. On the Wireless > Security page, select WPA2-PSK or Mixed WPA2/WPA-PSK in the Network Authentication field. The fields 
shown below appear. 


Note: For SR515ac models, go to the Wireless > 2.4 Ghz Band or 5 Ghz Band pages. 
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Wireless 


Manual Setup AP 
Basic 
Security You can set the network authentication method, selecting data encryption, 
MAC Filter specify whether a network key is required to authenticate to this wireless 
network and specify the encryption strength. 
Wireless Bridge Click “Apply/Save” when done. 
Advanced 
Station info Select SSID: SMARTRG + 
ee Network Authentication: (wraz -Ps ) 
Management 
Logout WPA passphrase:  —  sssresseesssrennens Click here to display 
Use base MAC address as WPA passphrase 
WPA Group Rekey Interval: o 
WPA Encryption: as et 
WEP Encryption: Disabied 
Aspi Save 


2. Fill in the fields, using the information in the field description table below. 
3. Click Apply/Save to save the settings. 


The fields on this page are explained in the following table. 


Field Name Description 


Select SSID : Select the SSID of the wireless network to which this security configuration will apply. 


Protected Management : (Available for SR515ac models only) Select whether to enable this option. Options are Enabled and 
Frames : Disabled, The default is Disabled. 


Use base MAC address as : Select whether to allow the base MAC address to be substituted for the password (in lieu of manually 
WAP/WAPI Passphrase ' entering a password). When this box is checked, the WPA/WAPI passphrase field is ignored. 


WPA Group Rekey Interval: The frequency at which the gateway automatically updates the group key and sends it to connected LAN 
‘ client devices. Options are: 1 - 65535 seconds. 


WPA/WAPI Encryption : Select the encryption standard. This field displays the option most compatible with the selected network 
‘ authentication method. Options are: 


e AES: Advanced Encryption Standard. 
e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol). 


Encryption Strength (Appears when WEP Encryption is set to Enabled) Select the length of the encryption method. Options are 
: 128-bit and 64-bit. 128-bit is the more robust option for security. 


Current Network Key : (Appears when WEP Encryption is set to Enabled) Select which of the four keys is presently in effect. 
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Field Name Description 


Network Key 1-4 


: (Appears when WEP Encryption is set to Enabled) Enter up to four encryption keys using the on-screen 
' instructions to achieve the desired security strength (128-bit or 64-bit). 


MAC Filter 


MAC Filtering refers to an access control methodology whereby the 48-bit address assigned to each LAN host NIC is used to determine 
access to the network. It is also known as Layer 2 address filtering. 


1. In the left navigation bar, click Wireless > MAC Filter. The following page appears. 


SMART/RG’ 


forward thinking 


Security 
P MAC Filter | NAC e © o Note: If ‘allow’ ts choosed and mac 
Wireless Bridge Restrict Disabled Allow Deny filter is empty, WPS will be disabled 
Advanced 
Station info 
our 


Management 
Logout 


add | tonove 


n a iii aai a a d pls 


nO Wireless -- MAC Filter 


Enter the MAC address and click “Apply/Save” to add 
the MAC address to the wireless MAC address filters. 


MAC Address: 


2. Select an SSID to which this MAC filter rule should apply. 


3. Inthe MAC Restrict Mode field, select whether to apply MAC filtering. Options are: 


e Disabled: MAC filtering is off. 
e Allow: For specified MAC address, access is permitted. 


e Deny: Access for the specified MAC address is rejected. 
4. Toadda MAC address to the filter list: 
a. Click Add. 
b. Enter the MAC address. 
c. Click Apply/Save. 
You are returned to the main MAC filtering page. 
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5. Click Apply/Save to commit your changes. 


Wireless Bridge 


On this page, you can configure the wireless bridge features of the wireless LAN interface. Wireless Bridge is also known as Wireless 
Distribution System. 


1. Inthe left navigation bar, click Wireless > Wireless Bridge. The following page appears. 
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Device Info Wireless -- Bridge 
aE =e This page allows you to configure wireless bridge features of the wireless LAN 
Wir z5 interface. You can select Wireless Bridge (also known as Wireless Distribution 
Basic System) to disable access point functionality. Selecting Access Point enables 
Security access point functionality. Wireless bridge functionality will still be available and 
MAC Filter wireless stations will be able to associate to the AP. Select Disabled in Bridge 
7 id Restrict which disables wireless bridge restriction. Any wireless bridge will be 
granted access. Selecting Enabled or Enabled(Scan) enables wireless bridge 
Advanced restriction. Only those bridges selected in Remote Bridges will be granted access. 
Station Info Click “Refresh” to update the remote bridges. Wait for few seconds to update. 
Diagnostics Click “Apply/Save" to configure the wireless bridge options. 
Access Point 
Manag k AP Mode: vV Wireless Bridge n 
Logout z K 
Bridge Restrict: Enabled 5 
Remote Bridges MAC Address: | lf 


I ] j 


| Refresh | | Apply/Save | 


2. Modify the settings as needed, using the information in the field description table. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


‘ Select whether to enable or disable access point (AP) functionality. Options are: 


e Wireless Bridge: Disables AP functionality. 
e Access Point: Enables AP functionality. Wireless bridge functionality is still available 
and wireless stations can associate to the AP. 


Bridge Restrict ' (Optional) Select to enable or disable wireless bridge restriction. Options are: 


e Enabled or Enabled(Scan): Enables wireless bridge restriction. Only bridges specified in 
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Field Name Description 


the Remote Bridge MAC Address field are granted access. Click Refresh to update the 
station list. The list takes a few seconds to update. 


e Disabled: Disables wireless bridge restriction. Any wireless bridge is granted access. 


Remote Bridge : Enter the MAC address(es) of the remote bridges to be allowed access. 
MAC Address 


Advanced 


On this page, you can configure the advanced features of the wireless LAN interface. You can select a particular channel on which to 
operate, force the transmission rate to a desired speed, set the fragmentation threshold, the RTS threshold, the wakeup interval for cli- 
ents in power-save mode, and more. 


1. Inthe left navigation bar, click Wireless > Advanced. The following page appears. 
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Wireless - Advanced 


This page allows you to configure advances features of the wireless LAN interface, You can select a 
particular channel an which to operate, force the transmission rate to a particular speed, set the 
fragmentation threshold, set the RTS threshold, set the wakeup interval for clients in power-save 
moce, set the beacon interval for the access point, set XPress mode and set whether short or long 


preambles are used. 

Click "Appty/ Save” to configure the advanced wireless options. 

Band: 240K + 

Cume: Auta i Current: 1 (imterference: acceptable) 
Auto Channel Timer(min) $ 7 

802, tin EWC: Ao 3 

Bandwidth: 20mh + Current: 20MHz 
Comrat sideband: lower: Current: N/A 
802, ttn Rate: Ae i 

802, 11n Protection: Auta è 

Support 802, 11m Client Oat 

RIFS Advertisement: Auto 2 

OBSS Coexistence: rable i 

RX Chain Power Save: Orsabie = Power Save status: Full Power 
RX Chain Power Save Quiet 

Time: 

RX Chain Power Save PPS: 9 

S4g™ Rate: EX.. Y 

Mudticast Rate: Meto 1 

Basic Rate: Ostat š 
Fragmentation Threshold: 22% 

RTS Threshold: D } 

OTIM interval: ' 

Beacon interval: CE 

Global Max Clients: a | 

XPress ™ Technology: Grabied i 

Transmit Power: 100% + 

WIMOWI-FI Multimedia: | Cables + 

WMM No Acknowledgement: Oissbies 1 

WM APSO: Enied $ 
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2. Modify the fields as needed, using the information in the field description table. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 
‘ Pre-set at 2.4 GHz for compatibility with IEEE 802.11x standards. 


‘ Select the Wi-Fi channel you want to use. Options are Auto and 1 - 11. It is recom- 
‘ mended to use only non-overlapping channels which are: 1, 6 and 11. 


Enter the frequency (in minutes) at which the gateway scans channels for inter- 
' ference. If a threshold of inference is detected, a new channel will be selected auto- 
‘matically. Options are: 0 - 65535 minutes. 


‘ Select whether to enable this standard. Options are Auto and Disabled. For detailed 
' information about this standard, refer to IEEE 802.11n Draft 2.0. 


Note: For SR515ac models, this field is labeled 802.11n. 


Bandwidth ; Select the operating bandwidth. Options are: 


e 20MHz: This option utilizes only one 20MHz band. 


e 40MHz: This option provides better throughput by taking advantage of two, 
adjacent 20MHz bands. 


Control Sideband l (Applies only to 40 MHz, 802.11n operation) The control sideband is the 20 MHz chan- 
‘nel on which the network is advertised, where client devices will find beacons. 
: Options are: 
e Lower: The additional 20 MHz of bandwidth for data will be positioned above 
the control channel. 
e Upper: The additional 20 MHz of bandwidth for data will be positioned below 


the control channel. Also, selecting this option changes the channel choices 
displayed. 


802.11n protection i Selects whether to enable 802.11n and legacy clients to both work effectively on the 
‘ network. Options are: 


e Auto: Provides maximum security but there is a noticeable impact on 
throughput. With this option, RTS/CTS behavior permits legacy clients to 
become aware of 802.11n transmit times, but decreases overall throughput 
of the system. 


e Off: Provides better throughput. 
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Field Name 


Support 802.11n client 


RIFS Advertisement 


OBSS Coexistence 


RX power chain save 
quiet time 


RX power chain save 


54g™ rate 


Basic Rate Frag- 
mentation Threshold 
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Description 


Select whether to restrict 802.11b/g clients from accessing the gateway. Options are 
‘ On and Off. 


i Reduced Inter-Frame Space (RIFS). Improves performance by reducing dead time 
‘ required between OFDM transmissions. Options are Auto and Off. 


Recommended primarily for "greenfield" deployments that include only 802.11n cli- 
‘ ents, and no legacy clients. 


‘ Coexistence of Overlapping Basic Service Sets (OBSS) prevents overlapping in the 
‘20 MHz and 40 MHz frequencies. Options are: 


e Enable: The gateway automatically reverts to 20 MHz channel bandwidth 
when another WiFi network within 2 channels of its own channel is detected 
or when a client device with its 40 MHz Intolerant bit set is detected. 


e Disable: The gateway advertises and operates in 40 MHz mode regardless of 
what other networks are configured nearby. 


‘ Select whether to turn on power-save mode. Options are Enable and Disable. 


' Note: Before setting this parameter, set 802.11n/EWC to Auto. 


‘ Sets the delay time (in seconds) between when system activity ceases and power- 
‘ save mode engages. Options are: 0 - 2147483647 seconds. 


‘ Note: Before setting this parameter, set 802.11n/EWC to Auto and to Enable. 


; Sets a throughput threshold (in seconds) for when the router engages power-save 
' mode after the quiet time seconds have elapsed. Options are: 0 - 2147483647 pack- 
‘ets per second. 


‘ Note: Before setting this parameter, set 802.11n/EWC to Auto and to Enable. 


: (Optional) Select a fixed data rate if desired. Options are Auto, 1 Mbps, 2 Mbps, 5.5 
‘ Mbps, and 11 Mbps. 


The Auto setting uses 11 Mbps when possible but drops (based on signal strength) 
: when necessary. 


: Enter the size at which packets will be fragmented into smaller units. The primary 
' consideration for this setting is the size/capability of the circuit. Options are 256 - 
: 2346 bytes. The default is 2346 bytes. 


SMART/RG 


Field Name Description 


; A high packet error rate is an indication that a slightly increased fragmentation 
‘ threshold is needed. When possible, the default value of 2346 bytes should be main- 
‘ tained. Poor throughput is a likely result of setting this threshold too low. 


Enter the RTS (Request to Send) packet size beyond which the WLAN client hardware 
' invokes its RTS/CTS mechanism. Smaller packets will otherwise be sent not using 
‘ RTS/CTS. Options are 256 - 2347 bytes. The default is 2347 (disabled). 


DTIM Interval ‘ Enter the Delivery Traffic Indication Message (DTIM or Beacon rate) countdown vari- 
‘ able used to indicate when the next window is available to client devices for listening 
‘ to buffered broadcast and multicast messages. Options are 1 and 65535. The default 


Beacon Interval : Enter the time interval (in milliseconds) between beacon transmissions. Beacon trans- 
‘ missions make known the presence of an access point and convey to wireless NICs 
: when to awake from power save mode to check for buffered frames at the access 
‘ point. Options are 1 and 65535 ms. The default is 100 ms. 


ote eee tahoe eee seee Gee oak ttt ee oe ees eae ae oe ate eee se eee 
Global Max Clients ‘ Enter the maximum number of client devices that can connect to the router. Options 
' are 1-255. 


l Select whether to enable Xpress Technology. This technology is compliant with draft 
' specifications of two planned wireless industry standards. Options are Enabled and 
‘ Disabled. 


: (Available for SR515ac models only) Select whether to enable support for 802.11h or 
: 802.11d regulations. The default is Disabled, 


‘ (Available for SR515ac models only) The radar check parameter setting for traffic try- 
‘ing to access your gateway from outside the network.. The displayed value is -1. 


: (Available for SR515ac models only) The radar check setting for traffic trying to access 
‘ your gateway from inside your network. The displayed value is -1. 


: Select whether to enable this technology. It allows multimedia services (audio, video 
‘ and voice packets) to get higher priority for transmission. Options are Auto, Enabled, 
‘and Disabled. 


WMM No Acknow- Select whether acknowledgements are sent (applied at the MAC level). Enabling this 
ledgement option allows better throughput but, in a noisy RF environment, higher error rates 
‘may result. Options are Enabled and Disabled. 
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Field Name Description 


WMM APSD ‘ Select whether to enable Automatic Power Save Delivery, a power consumption sav- 


' ing feature. Options are Enabled and Disabled. 


Beamforming Trans- : (Available for SR515ac models only) Select to concentrate the transmission signal at 
mission (BFR) ‘the gateway location. This results in a better signal and potentially better throughput. 
: Options are Enabled and Disabled, 


Beamforming Recep- : (Available for SR515ac models only) Select to concentrate the transmission signal at 
tion (BFE) ‘ the gateway location. Options are Enabled and Disabled, 


Station Info 


On this page, you can view authenticated wireless stations and their status. 
In the left navigation bar, select Wireless > Station Info. The following page appears. 


Click Refresh to update the information. 
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Device Info Wireless -- Authenticated Stations 
Advanced Setup 
Wireless 
Basic 
Security 


This page shows authenticated wireless stations and their status. 


Associated Authorized SSID Interface 


esomszerst] ves | suns] wo 


| Refresh | 


MAC Filter 
Wireless Bridge 
Advanced 


Diagnostics 


FO a a OT i i OO Pe i, a aa aiin 


DIAGNOSTICS 


in this section, you can run line performance tests. Three legs of the data path are included in the available tests: LAN connectivity, DSL 
connectivity and Internet connectivity tests. 


You can also ping a host or trace a connection. 


Diagnostics 


On this page, you can view information about your DSL connection. 
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In the left navigation bar, click Diagnostics > Diagnostics and then click Test at the bottom of the page. The normal test method is ini- 
tiated, utilizing OAM F5 loopback cells. 


The table is updated with fresh diagnostic information about connection integrity. To learn more about what is being tested and what 
actions to take in the event that a particular test should fail, click the Help link at the far right of each line item. 


To test at the VP level in lieu of at an individual VC connection, click Test With OAM F4. 


Note: For SR515ac models, status is shown for both wireless bands in the Test your Wireless Connection row. 


r 


SMART/RG’ 5R3 


forward thethong 


Diagnostics 


The individual tests are fisted below, tf a test displays a fall status, click “Rerun Diagnostic Tests” at the Sottom of this page to 
dick “Help” and follow the troubleshooting procedures, 


make sure the (al status is consistent. If the test continues te fal, 
Test the connection to your local network 


Fault Management 


On this page, you can view diagnostics regarding your VDSL PTM or Ethernet WAN connection. Fault Management is compliant with 
IEEE 802.1ag for Connectivity Fault Management. 


Note: This option is not available for SR515ac models. 
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1. In the left navigation bar, click Diagnostics > Fault Management. The following page appears. 
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802. tag Connectivity Fault Management 
This diagnostic is only used for VDSL PTM mode, 


Maintenance Domain (MD) 


Diagnostics ta ej 
|__ Fault Management | Destination MAC Address: = 
Ping Host 802.1Q VLAN ID: [0-4095] o 


Trace Route to Host 


Mer 


Logout 


Test the connection to another Maintenance End Point (MEP) 


Find Maintenance End Points (MEPs) 


Gncrce mesane (1 EE i a 


Set MD Love! Send oopbars herd Laere 


2. Inthe Maintenance Domain (MD) Level field, select the domain level that you want to view and then click Set MD Level. Main- 
tenance Domains are management spaces on a network, typically owned and operated by a single entity. MDs are configured 
with names and levels and a hierarchical relationship exists between domains based on levels. Options are O - 7. The larger the 
domain, the higher the value you should select. 


3. Enter the Destination MAC Address . 
4. Enter any applicable 802.1Q VLAN IDs. Options are 0 - 4095. 


Ethernet OAM 


On this page, you can view diagnostics regarding your VDSL PTM or Ethernet WAN connection. Fault Management is compliant with 
IEEE 802.1ag for Connectivity Fault Management. 


Note: This feature is available only for SR515ac models. 
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1. Inthe left navigation bar, click Diagnostics > Ethernet OAM. The following page appears. 
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Ethernet Link OAM (802.3ah) 
C] Enabled 


Ethernet Service OAM (802. tag / Y.1731) 
C Enabled ® 802.1ag O ¥.1731 


2. Modify the fields as needed, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Ethernet Link OAM (802.3ah) section 


Ethernet Link OAM Click the Enabled checkbox to set options for this protocol. Additional fields appear. 
(802.3ah) 


WAN Interface : Select the WAN interface that you want tested. 

OAMID Enter the ID of this OAM configuration. Only positive numbers are allowed. 
AutoEvent Select whether tocreate eventlogentries automatically. = 
Variable Retrieval Select to enable on-demand link diagnostics, including biterror-rate approximation. 


PLAS T PE ETEA (piss jars E A E PAES TEE A FIE EES r E E A E E E E EL A E E E E TA E E TEE 


Link Events ‘ Select to enable reporting of critical conditions that may cause link failure. 


Ethernet Service  ' Click the Enabled checkbox and then click 802.1ag or Y.1731 to set options for this pro- 
OAM ‘ tocol. Additional fields appear. 
(802.1ag/Y.1731) 


MD Level : (Appears for the 802.1ag option only) Select the domain level for this maintenance 
‘domain. Options are 0 - 7. The larger the domain, the higher the value you should select. 
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Field Name Description 


MD Name : (Appears for the 802.1ag option only) Enter the name of the maintenance domain, e.g., 
‘ Broadcom. 


‘ Enter the ID of the VLAN for the local MEP. Options are 1 - 4094. The default is -1 (no 
: VLAN tag). 


‘ Enter the maximum number of hops allowed. Optinons are 1- 233. The default is -1 (no 
‘ hop limit). 


Linktrace Result ‘ The results of the linktrace test. 


Ping 
On this page you can ping a server by host name or IP address. 


1. Inthe left navigation menu, click Diagnostics Tools > Ping. The following page appears. 


| SMART/RG' — 
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Ping Host 


Enter the IP address of the device that you wish to ping. The results will take a few moments (up to 15 
seconds) to appear, 


Target Host Address: 


2. Enter the host name or IP address. 
3. Click Submit. The details of the ping appear on the page. 


Trace Route to Host 
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On this page, you can use the Trace Route utility to trace a connection. 


1. In the left navigation menu, click Diagnostics Tools > Trace Route to Host. The following page appears. 
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Trace Route to Host 


Enter the IP address of the Gevice that you with to trace. The results will take a few moments (up to 15 
Seconds) to appear, 


Target Host Address: | Taace Rote to Mont 


2. Enter the host name or IP address that you want to trace. 
3. Click Submit (or for the SR515ac, click Trace Route to Host). The details of the trace appear on the page. 


Management 


In this section, you can manage configuration files, access control, management server configurations, SNMP Agent settings, and work 
with event logs. 


Settings 
In this section, you can back up the current settings, restore saved settings, or reset the gateway to default settings. 


Backup 


You can back up the current settings for your gateway to a file stored on your computer. 
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1. Inthe left navigation bar, click Management > Settings > Backup. The following page appears. 
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Device info Settings -- Backup 
Advanced Setup 
Wireless 
Diagnostics 
Management 
Settings 


Backup Running Broadband Router Settings. You may 
save your router running settings to a file on your PC. 


| Backup | 


Update 
a Default Backup Default Broadband Router Settings. You may 
save your router default settings to a file on your PC. 


Backup Delauk Serumgs — 


cette nettle Mk, a T N PY ee T OT P oi 

2. To save a backup file of the currently running settings to a local drive, click Backup Running Settings. The open/save dialog box 
appears. Click OK. The backupsettings.conf file is created in your default download location. 

3. To save a backup file of the default settings to a local drive, click Backup Default Settings. The open/save dialog box appears. 


Click OK. The backupdefaultsettings.conf file is created in your default download location. 


Note: If you plan to create backups frequently, you may want to rename the backup files by appending dates to the filename. Other- 
wise, every new backup file overwrites the existing backup file. 


Update 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


On this page, you can restore previously backed-up gateway settings. Both Current and Default settings can be managed here. 


1. In the left navigation bar, click Management > Settings > Update. The following page appears. 
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Device Info Settings -- Update 
Advanced Setup R A 
cart Update Running Broadband Router Settings. You may update 
Vireless your router running settings using your saved files. 
Diagnostics 
Management Settings File Name: No file selected. 
Settings 
Backup 
Restore Default Update Default Broadband Router Settings. You may update 
your router default settings using your saved files. 


System Log 


Security L j r 
RNE 5 Settings File Name: No file selected. 
gen 


Management Server Update Default Settings 
Internet Time 


2. Click the Browse button for the type of setting you wish to restore. 
3. Locate the desired .conf file on your local system and click Open. 


4. Click the appropriate Update button. 
The gateway reboots when the update has completed. 


Restore Default 
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On this page, you can reset the gateway to its default settings which can be the factory defaults or defaults that you customized and 
stored. For details, see "Restore Default" and "Restore Default" sections above. 


1. Inthe left navigation bar, click Management > Settings > Restore Default. The following page appears. 
2. Click Restore Default Settings. The gateway is rebooted. 
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Device Info Settings -- Restore Default 
Advanced Setup 
Wireless 
Diagnostics 
Management 


Restore Broadband Router setting to the defaults. 


Reviore Delawit Settags 


Settings 
Backup 
Update 
n System Log 


a a ee T a Ca 
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System Log 


On this page you can view and configure the system log generated for your gateway. 


1. Inthe left navigation bar, click Management > System Log. The following page appears. 
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System Log 

The System Log dialog allows you to view the System Log and configure the System Log options. 
Click “View System Log” to view the System Log, 

Click “Configure System Log” to configure the System Log options. 


[em armam iog | [ Conte armen sag | 
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2. To view the contents of the system log, click View System Log. The System Log details page appears. 


Switch to tab: | 192.168.1.1/edmin/logview.cmd 


bos [omone [rae tanning mutune somn se- 

Jan 1 j 

booo: [eremonprie [kernet eth3 (switch port: 4) Link UP 1000 mbps ful duplex 

fae semone | systog: COM:caCdmPolf orMessages: unrecognized msg 0x10000250 


sysdog: httpd:644,295:cgiVaticatesessionKey:2356:falled session key check. Got 2135380610, 


Systog: httpd:790.530:cgivatidatesessionkey:2356:fatled session key check. Got 685698293, 


es oe eee 
Jan 1 a X 
a freee 
a Se 


3. To update the displayed entries, click Refresh. 
4. To modify the system log settings: 
a. Click Configure System Log. The System Log - Configuration page appears. 
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System Log -- Configuration 


If the log mode is enabled, the system will begin to log all the selected events. For the Log 
Level, all events above or equal to the selected level will be logged. For the Display Level, 
all logged events above or equal to the selected Level will be displayed. If the selected 
made is ‘Remote’ or ‘Both,’ events will be sent to the specified IP address and UDP port of 
the remote syslog server. If the selected mode is Local’ or Both,’ events will be recorded in 
the local memory. 


Sotect the desired values and click ‘Apply/Save' to configure the system log options. 


Log: © Disable @ Enable 


Log Level: Debuggng ~ 
Display Lovet: Error - 
Mode: 
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b. Modify the settings as needed. 


The following table describes the options for configuration of the system log. 


Action Description 


Enable/Disable ' Select to turn logging off or on. 


Logging Level : Select Error unless actively troubleshooting a situation with a subscriber for which increased log detail 
: is required. Options are Emergency, Alert, Critical, Error, Notice, Warning, Informational, and 
‘ Debugging. The options are listed in top-down order fThe default is Debugging. 


: Select Error unless actively troubleshooting a situation with a subscriber for which increased detail is 
‘required. This field has the same options as the Logging Level field. 


‘ Controls where log events will be sent. 


: To send logs to the specified IP address and UDP port of a remote syslog server, select Remote or 
‘ Both. 


; To record events in the local memory of your SmartRG gateway, select Local or Both. 


c. Click Apply/Save to save your changes. 


Security Log 


The security log contains a history of events related to sensitive access to the gateway. Logged events include: 


e Password change success 

e Password change failure 

e Authorized login success 

e Authorized login fail 

e Authorized user logged out 

e Security lockout added 

e Security lockout removed 

e Authorized resource access 

e Unauthorized resource access 


e Software update 
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1. In the left navigation bar, click Management > Security Log. The following page appears. 
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Security Log 

The Security Log dialog allows you to view the Security Log. 
Click “View” to view the Security Log. 

Click “Reset” to clear and reset the Security Log. 
Right-click here to save Security Log to a file. 


G._3}G __B 


Access Control 


i Oe i 


2. Doany of the following: 
e To view the log, click View. 
e To purge the log entries and start fresh, click Reset. A confirmation message appears. Click Close. 


e To export the log to a local drive, click the here link in the last line of the instructions on the page. The log appears in 
the browser window. You can save the page or select all of the log text, paste into a Notepad window and save the file. 


SNMP Agent 
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On this page, you can configure the SNMP (Simple Network Management Protocol) settings to retrieve statistics from the SNMP agent 
for the gateway. You can enable or disable the SNMP agent and set parameters such as the read community, system name and trap 
manager IP. 


1. In the left navigation bar, click Management > SNMP Agent. The following page appears. 


- SMART/RG’ aie 
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SNMP - Configuration 


Simpie Network Management Protocol (SNMP) allows a management application to retrieve statistics and status from 
he SNP agent in this device. 


Select the desired valves and click “Apply” to configure the SAMP options, 
DWP Agent @ Disable © Enable 


Read Community: 
Set Community: 
System Name: 
System Location: 
System Contact: 
Trap Manager IP: 


2. Modify the fields as needed. 
3. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Read Community ‘The options are public and private. The default is public. 


ia EE Shey Se Sete peepee Soars etree cee ae: alee ye eee E se ee ea be ae eee nee eS ee se peo Seen ees steeds BRR ease ee oc eset es ce 


Set Community ‘The options are public and private. The default is private. 


EPPEN See TS potas Doeeea toca tee aare EN EAR rN Sees Bese Se ase ee aa a aa e aea a A re Sees See 


System Name ‘The name of the system. 


PPE sore aseteteisiste, sue: PPE PRAP PEA E O eter otatieie = sia E ahene ia a y's ieee elay state sore arc E E PATEE A EE EIL E E E E one A PEE cre eyseate.ses eos sere A r 


System Location : (Optional) The location of the system. 


EEEIEE adele e-aie, ee ee i i i ee ed 


System Contact :The contact for the system. 


PEREPERE TEPEE a seks, pis Heel ETTET ce Blew son cede See Sr bae EESTIS TTET ESTORT TETTETETT ESETT SS SERN Cea a ESSE Se BOSSE Ree Tee Se 


Trap Manager IP: The IP address where the trap manager is installed. 


Management Server 


A management server is an Auto Configuration Server (ACS) such as Cisco Prime Home which offers significant advantages in terms of 
automation and productivity when managing subscriber devices in the field. 


In this section, you can configure ACS settings for the TR-069 client and configure STUN server settings. 


TR-069 Client 
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On this page, you can configure the gateway with details about the management ACS to which this gateway will be linked. 


SmartRG gateways support TR-069-based standards for remote management. The TR-069 client page is preset with default connection 
parameters and generally only needs to be enabled, pointed to the ACS URL, and any required ACS credentials entered. 


SmartRG products can accommodate several ACS products, including: 


e Cisco Prime Home 
e ClearVision 


e Calix Consumer ACS 


A minimum firmware level of v2.5.0.x is required. 


If you need to modify the request defaults, consult the ACS manufacturer’s documentation. 


1. Inthe left navigation bar, click Management > Management Server > TR-O69 Management. The following page appears. 
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Device info TR-069 Client -- Configuration 
rarer — WAN Management Protocol (TR-069) allows a Auto-Configuration Server (ACS) to 
Wireless perform auto-configuration, provision, collection, and diagnostics to this device. 
Diagnostics 
Management Select the desired values and click “Apply/Save” to configure the TR-069 client 
Settings options. 
System Log 5 
Security Log OUl-Serial @MAC Serial 
SNMP Agent Number 
O = 
Management Server TR-069 Client DisableEnadle 
JN Config inform interval: wo 
Access Control ACS URL: a ll 
Update Software on aar Name: ‘oy 
ee TR-069 Client Port: a 
mae WAN Interface used by TR-069 client: Any WAN -IPs = 
m Connection Request Authentication 
Connection Request User Name: aan 
Connection Request Password: sesse 
Connection Request URL: (null) 


Update or complete the necessary fields per the instructions from your ACS platform vendor. 
Click Apply/Save to commit your changes. 


Note: This manual does not cover the setup of your ACS. Consult the materials provided by your ACS vendor to determine the 
appropriate parameters and server settings for configuring remote WAN side management via an ACS using the TR-069 Pro- 
tocol. 
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The fields on this page are explained in the following table. 


Note: Please consult with your ACS vendor for any specific connection request requirements impacted by the following settings. 


Field Name Description 


OUI-Serial : Select whether to use the base MAC address or the serial number of your gateway 
‘ when connecting to the ACS. This value may display in an ACS user interface when 
‘ looking at the device details of a particular gateway. 


(Optional) For SmartRG gateways using firmware version 2.5.0.2 and above, select 
‘ Serial Number. 


‘ MAC (MAC address) is the default for this field and the most typical scenario. For firm- 
‘ ware versions prior to 2.5.0.2, MAC is the only available option. 


TR-069 Client ; Enable or disable the TR-069 client on the CPE. You can disable the TR-069 WAN Man- 
' agement Client if no ACS is employed. 


Note: If you may want to add an ACS to your infrastructure in the future, it is recom- 

‘ mended to leave this option enabled. When this feature is disabled, every gateway 

l deployed with this setting must be manually/locally re-configured to enable this client 
' if needed later. 


‘ (Available for SR515ac models only) Click the Enabled checkbox to enable your gateway 
‘ to obtain the ACS URL via DHCP. 


Inform Interval l The frequency (in seconds) with which the CPE (gateway) checks in with the ACS to 
‘ sync and exchange data. A typical production environment entails CPEs in the field 
‘ informing to the ACS once/day or every 86,400 seconds. 


Enter the URL for the CPE to connect to the ACS using the CPE WAN Management Pro- 
‘ tocol. This parameter MUST be in the form of a valid HTTP or HTTPS URL. An HTTPS 

: URL indicates that the ACS supports SSL. The "host" portion of this URL is used by the 

‘ CPE for validating the certificate from the ACS when using certificatebased authen- 

: tication. 


‘ You can include a port specification suffix if your ACS platform requires it, e.g., http://- 
: customer.acs.wanmanagmentservices.com:30005 where 30005 is the port number. 
‘ The default port is 30005. 


: A minimum firmware level of v2.5.0.x is required. 


ACS User Name : Enter the user name by which this gateway logs in to the ACS. The default username is 


' typically admin. 
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Field Name Description 


ACS Password ‘ Enter the password to authenticate the above user name. The default password is typ- 


' ically admin. 


WAN Interface : Select any WAN, LAN, Loop back or a configured connection to declare how this gate- 
used by TR-069 cli- way will connect to the ACS. 
ent ' 


4. (Optional) You can configure the modem client Connection Request mechanism used by your ACS for communication with sub- 
scriber gateways. 


Field Name Description 


Connection Request ‘ Select this option if your ACS requires authenticated connection requests. 
Authentication : Complete the additional credential fields that are exposed. 


Connection Request User- Enter the user name by which this gateway authenticates the ACS. Contact 
' your ACS provider for this information. 


Connection Request Pass-: Enter the password by which this gateway will authenticate to the ACS. 
Contact your ACS provider for this information. 


Connection Request URL ; There is typically no need to set the Connection Request URL as it is nor- 
; mally established automatically based on the effective WAN IP. In some 
‘cases, the port can be configured as needed. An example value for this 
‘ field might be "http://xxx.xxx.xxx.xxx:30005/" where the xxx values are 
' specific WAN IP octet numbers. 


‘ Note: The default port value is 30005. 


' This may need to be configured for interoperability with your ACS vendor. 
‘If so, consult with SmartRG. 


5. To force the gateway to attempt to sync with the ACS, click the GetRP CMethods button. This will assist you in verifying the TR- 
069 parameters entered above. 


STUN Config 


STUN stands for “Simple Traversal of UDP through NATs”. STUN enables a device to find out its public IP address and the type of NAT 
service it is sitting behind. 


STUN is most commonly used with older modems under ACS management connected via a NAT gateway. NAT accommodates a LAN- 
side device that has been allocated a Private IP address such as a CPE device on a private network behind an ONT. In this instance, the 
regular CWMP Connection Request mechanism to talk to the modem gateway cannot be used to initiate a session with that ACS. 


A STUN server receives STUN requests and sends STUN responses. STUN servers are generally attached to the public Internet. 
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On this page, when a STUN server is present within the infrastructure of the Service Provider, you can configure this gateway with the 
connectivity specifics for that server. 


1. In the left navigation bar, click Management > Management Server > STUN Config. The following page appears. 
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TR-069 Client -- STUN Configuration 


Select the desired values and click “Apply” to configure the TR-069 Client STUN 
options. 


@ STUN Server support 


STUN Server Address: 

SNMP Agent STUN Server Port: “me 

Management Server STUN Server User Name: 
TR-069 Client STUN Server Password: a 

STUN Server Maximum Keep Alive Period: -1 

STUN Server Minimum Keep Alive Period: o 


STUN Config 
Access Control 
Update Software Sars Appi 
Redoot 

Logout 


2. To view the required STUN settings, click STUN Server Support. 
3. Complete each field in accordance with the implementation specifics of your server. 
4. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


STUN Server ‘ The physical STUN server’s assigned network address. An invalid address will produce an 
Address ‘ immediate on-page error message from the gateway. You can enter a maximum of 256 
‘ characters 


: An ACS server may also have STUN functionality running on the same physical box. Consult 
‘ your ACS vendor for implementation options and also TR-069 protocol documentation, if 
‘ necessary. 


EE TE R E T E E EO A E EE E EEEE A TEN 
STUN Server Port ' Set the port number associated with your STUN server infrastructure. Options are 0 - 
: 64435. The default is 3478. 


‘ The username by which the gateway accesses the STUN infrastructure. Maximum length is 
l 256 characters. Special characters are valid. The value will be hidden. 


STUN Server Pass- ' The password by which the modem authenticates the above username to the STUN infra- 
word ' structure. Maximum length is 256 characters. Special characters are valid. The value will be 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Field Name Description 
‘ hidden. 


STUN Server Max- : [0-Unlimited] Value is time in seconds. Default = -1 which specifies that there will be NO 
imum Keep Alive  ' keep-alive period maximum limit. 
Period * : 


STUN Server Min- ; [0-Unlimited] Value is time in seconds. Default = 0 seconds. 


imum Keep Alive 
Period * 


* This mechanism is used in coordination with the refreshing of NAT bindings. Specifically, in conjunction with use of Restricted Cone 
NAT or Port Restricted Cone NAT (as may be configured in some gateways). A device’s internal address / port mappings, which the 
STUN protocol is allowed to make use of, can have keep alive values attributed. These minimum and maximum keep alive times define 
respectively, the minimum time to retain the mapping information STUN has discovered, and the maximum time to retain that inform- 
ation, before refreshing it through forced re-discovery. 


With the above-mentioned NAT schemes, it is possible the network address translation initially established may not be used after a spe- 
cified elapsed time. Such internal mapping is dropped. The gateway will then assign a different address mapping. This mechanism 
within the STUN protocol allows for coordinated refresh on the bindings for mappings it uses. For further information, review STUN- 
related RFCs. 


Selecting appropriate values for these two fields are influenced by a variety of environmental factors including devices types deployed, 
services employed and NAT configuration options enabled within the topology. 


Internet Time 
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On this page, you can synchronize the clock in your gateway with reliable external clocking servers available on the Internet. 


1. In the left navigation bar, click Management > Internet Time. The following page appears. 
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Device info Time settings 
Advanced Set 
ae P This page allows you to change the modem’s time configuration. 
Diagnostics Automatically synchronize with internet time servers 
Management 
Settings First NTP time server: _time.nist.gov $ 
System Log Second NTP time server: clock via.net 3 
Security Log Third NTP time server: | Nose : 
SNMP Agent Fourth NTP time server: | Nose $ 
Fifth NTP time server: | None $ 
Management Server n 
L internet Time | Time zone 
(CMT-08: T s 
Access Control offset: ORON Paaie Taa, Tinana 
Update Software 
ca Avon Save 


Logout 


Click Automatically synchronize with Internet time server. A list of server fields and the Time Zone offset field appear. 
Select servers from the list or enter your own NTP servers. 

Select the desired time zone for the gateway. 

Click Apply/Save to commit your settings. 


uk Wn 


Access Control 


On this page you can manage access to your gateway and network. Depending on the model, you may be able to configure passwords, 
accounts, services, the logout timer, and/or access lists. Not all features are available on all models. 


Accounts 


On this page, you can create and manage user accounts for your gateway. Your gateway can support multiple login accounts for its on- 
board user interface. Each account can be customized to grant access privileges to specific pages in the interface. This is particularly use- 
ful when an ISP wishes to limit access for subscribers, yet grant full access for technical support and on-site installation personnel. 


Note: This feature requires firmware v2.5.0.7 or later. 


Add an Account 
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1. In the left navigation bar, click Management > Access Control > Accounts. 
2. To set up a new user, click Create Account. The following page appears. 
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Create Account 


Password: | © Show Password 


Assign Privileges 
5 Device Info 

D Summary 

|) WAN 

O Statistics 


3. Enter a Username and Password for the new account. 

4. Select the features that you want this user to access. If you select a subcategory, the subordinate boxes are also selected. 

5. Click Save Account to commit your changes. The new account is created. To test the account credentials, log out of the interface 
and then log back in using the new account. 


Modify or Delete an Account 


Note: You can NOT modify or delete the default user accounts (Admin, Support, MFG, or User) but you can disable the Support, MFG, 
or User accounts. 


You must be logged into the gateway as the Admin or Support user to modify or delete any accounts. 


1. In the left navigation bar, click Management > Access Control > Accounts and then click, Delete/Modify Account. The 
Delete/Edit Account page appears. 
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z Device Info 


Z Summary 
w WAN 
Æ Statistics 
Z Route 
Z ARP 
 OHCP 


3 Advanced Setup 

D Layer? Interface 
D WAN Service 

D 4G LTE Settings 
D Ethernet Config 
D LAN 

DO NAT 

D Security 

O Parential Control 
© Quality of Service 


eR CRORGERORUROROBG 


© 2012-2015 SmankRG Inc. Al Rights Reserved. 


2. Inthe Select an account field, select the account you wish to modify or delete. 

3. Doone of the following: 
a. To modify an account, check or clear the desired boxes and then click Update Account to commit your changes. 
b. To delete an account, scroll to the bottom of the page and click Delete Account to remove the account. 
c. To disable or enable an account, click the Enable/Disable account buttons. 
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Your changes are implemented immediately. 


Default Passwords 


PASSWORD 


‘ IDH7iw@ibRsPOIBa 


Services 
On this page, you can define a Service Control List to control which services (FTP, HTTP, Telnet, etc.) are restricted on the LAN. 


1. In the left navigation bar, click Management > Access Control > Services. The following page appears. 
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Device info Access Control -- Services 

RRP A Service Control List (SCL") is used to enable or disable network services on 
the gateway. 

Diagnostics Note: LAN side firewall must be enabled to modify LAN SCLs. 


Management 
Settings 
System Log 
Security Log 
SNMP Agent 
Management Server 
Access Control 
| Services | 
Passwords 
Access List 
Logout Timer 
Update Software 
Reboot 
Logout 


2. Modify settings as desired. 
3. Click Save/Apply to commit your settings. 


The fields on this page are explained in the following table. 
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Field Name Description 


Services : This column identifies the SCL services that can be enabled or disabled. Options are: 
‘ FTP, HTTP, ICMP, SNMP, SSH, TELNET, and TFTP. 


Use encrypted HTTP(S) : Click this checkbox to implement secured HTTP. 


: Warning: When you click this option, the gateway reboots. 


Select the service enabled on LAN side firewall. Depending on configuration settings 
' made elsewhere in the GUI, this column may be read-only. 


: Note: ICMP is an always-enabled service by default and has no checkbox. 


‘ The port the access control applies to on the WAN side for the given service. See 
' port information below. 


‘ FTP Service access (For WAN, this is default port). 


pPeverSeenteece seat eres ede JSS ee se ms ee Se ste S See tees Se Stee Sere EEEE EEEE TEL TEETE 


‘ HTTP Service access (For WAN, this is in association with specified port (default is 


‘ TFTP Service Access (as with default port).!!! ASKSME to review contenet in par- 
' entheses. 


Passwords 


On this page, you can create or change passwords associated with access to the gateway. Three accounts are available to manage: 
Admin, Support and User. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


1. In the left navigation bar, click Management > Access Control > Passwords. The following page appears. 


SMART/RG’ 


forward thinking 


Device Info Access Control -- Passwords 
RAINY, Access to your Router is controlled through three user accounts: admin, 
reless support, and user. 
Diagnostics 
Management The user name “admin” has unrestricted access to change and view 
Settings configuration of your Router, 
System Log The user name “support” ts used to allow an ISP technician to access your 
Security Log Router for maintenance and to run diagnostics, 
SNMP Agent 
Management Server The user name “user” can access the Router, view configuration settings and 
Statistics, as well as update the router's software. 
Services Use the fields below to enter up to 16 characters and click “Apply/Save™ to 
change or create passwords, Note: Password cannot contain a space, 
Access List 
User Name: 
Logout Timer Oid Password: 
Update Software New Password: 
Reboot Confirm Password: 


Logout 


2. Enter the information for the logged-in account. 
3. Click Apply/Save to commit your settings. 


The fields on this page are explained in the following table. 


Field Name Description 


User Name ‘ Specifies name of account to be configured. Options are admin, support, user. 


Old Password : Enter the current password for the entered User Name. 
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New Password : Enter the new password for the entered User Name. A maximum of 16 characters is allowed. 


Confirm Password: Re-enter the new password. 


Access List 


On this page, you can create and manage access control lists to control inbound access to specific IP addresses. 


Note: This feature is available only for SR515ac models. 


1. In the left navigation bar, click Management > Access Control > Access List. The following page appears showing any 
addresses already configured for managed access. 
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Management Access Lists 


ACLS Blow the admin to restrict inbound WAN-side management Connections to specified source addresies. 
The specified address should be in CIDR format. 


ASIEN 
192. 168. 1.50/24 wi show access to al hosts in the 192.168.1.0 subnetwork. 
72.185.226. 106/32 wit alow access orty to the host with IP address 72. 185.226. 106. 


Aredoot may be required for certain complex configurations. 


a e 


A macim of 10 entries can be agoes. 


2. To add an address: 
a. Click Add. 
b. Enter the address for which you want to restrict access. 
c. Click Apply/Save. You are returned to the Management Access Lists page. 
d. To add up to 9 more addresses, repeat steps 2a - 2c. 
3. To remove an address, click the Remove checkbox next to it and then click Remove. The list is updated. 


Logout Timer 


On this page, you can define the maximum time that a session can remain open before the gateway logs out. 


Note: This feature is available only for SR515ac models. 


1. In the left navigation bar, click Management > Access Control > Logout Timer. The following page appears. 
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Access Control — Logout Timer 


Here you can configure the automatic GUI logout timer. 
A value of zero disables the automatic logout feature. 


Logout Timer Period (enter a valve between Oandé0minutes):[  ] 


2. Inthe Logout Timer Period field, type the number of minutes after which a session will be ended. Options are 0 - 60 minutes. 
The default is 15 minutes. To disable this feature, enter a zero (0) in the field. 
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Update Software 


On this page, you can update the firmware of your SmartRG gateway. Software updates for SmartRG products are available for down- 
load by direct customers of SmartRG via the SmartRG Customer Portal. 


1. In the left navigation bar, click Management > Update Software. The following page appears. 
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Update Software 


Step 1: Obtain an updated software image file from your GP. 


Step 2: Enter the path to the image file location in the box below or dick the 
"Browse" button to locate the image file. 


Step 3: Click the "Update Software” button once to upload the new image file. 


NOTE: The update process takes about 2 minutes to complete, and your Broadband 
Router will reboot. 


Software Fle Name:  Growsn te fle seuected. 


2. Follow the on-page instructions. When the update has completed, the gateway reboots. 


Reboot 


Occasionally, troubleshooting measures may require that the gateway be rebooted. On this page, you can reboot your gateway. 
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1. In the left navigation bar, select Management > Reboot. The following page appears. 
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Device info 

Advanced Setup Click the button below to reboot the router, 

Wireless 

Diagnostics 

Management 
Settings 
System Log 


Reboot 


Security Log 

SNMP Agent 

Management Server 

Access Control 

Update Software 
L Reboot | 


Logout 


2. Click Reboot. Your gateway is rebooted and you must log in again if you want to make further changes. 
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APPENDIX A: ADVANCED FEATURES 


This appendix outlines the advanced features of SmartRG brand home gateway products. 


Connect-and-Surf (Automatic Broadband Connection Configuration) 


The Connect-and-Surf feature automatically establishes a WAN connection for default-configured gateways obviating the need for 
manual or custom configurations. The active physical layer is detected (ADSL, VDSL or GigE) and layer 3 connectivity is established 
using PPP authentication or DHCP. 


Note: If you prefer to configure your gateway's WAN interface manually, connect a laptop to any of the LAN ports and follow the 
instructions in the Logging in to Your SmartRG Gateway and Management Server sections of this User Manual. Do not connect the WAN 
interface cable until after the configuration is completed. 


Activation (Automatic ACS Connection Configuration) 


SmartRG gateways are designed to discover their service provider-specific ACS management settings without custom firmware. We 
maintain an activation server that associates a device's MAC address with its service provider's ACS settings. Our gateways contact the 
activation server to have their ACS settings modified on initial power up (or after being reset to factory default settings). 


Note: Activation server support is provided for ALL SmartRG gateways at no additional cost. SmartRG Inc. enters gateway MAC 
addresses into the activation server prior to shipment. 


TR-069 Remote Management: ACS Support 


With a rich TR-069 heritage and a strong commitment to standards based, remote management, SmartRG gateways are designed for 
maximum interoperability with industry leading, TR-069-based remote management systems. Our gateways provide maximum remote 
manageability and the highest level of visibility into the connected home yielding: 


e Shorter integration times e Improved customer support 


e Lower system integration costs e Reduced operational expenses 


SmartRG works closely with industry-leading, TR-069 automated configuration server (ACS) solution providers (such as those shown 
below) to ensure "plug-n-play" interoperability 


sane eee ‘ In addition to being Calix physical layer certified (to ensure Calix access equipment com- 
ae onnegt ‘ patibility), SmartRG gateways have been tested to confirm maximum interoperability with 


‘ the Calix Compass/Consumer Connect ACS solution. 


AAFFINEGY ; Affinegy ACS i SmartRG gateways have been tested to confirm maximum interoperability with the Affinegy 
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‘ ACS solution. 
‘ Cisco Prime 
: Home™ ACS 


SmartRG gateways have a long history of Prime Home (formerly ClearVision) ACS inter- 
; operability. 
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APPENDIX B: FEATURE COMPARISON MATRIX 


SmartRG residential gateways combine WAN connectivity with a firewall-protected router and industry-leading TR-069 remote man- 
agement support. Most variants provide 802.11n Wi-Fi connectivity, as well. See the model-specific details below. 


Broadband Con- LAN LAN Managed Managed Wi-Fi Wi-Fi Signal IPv6 IPTV 
nection ports Device Firewall Monitor Ready 
Discovery 


Tri-mode: ADSL2+, ‘5 GE! ; 802.11n 
VDSL2, GigE  ' ; ; : 


Tri-mode: ADSL2+, 
VDSL2, GigE 


Tri-mode: ADSL2+, 
VDSL2, GigE 


Tri-mode: ADSL2+, 
VDSL2, GigE 


Tri-mode: ADSL2+, 
VDSL2, GigE 


Tri-mode: ADSL2+, 
VDSL2, GigE 


Tri-mode: ADSL2+, 
VDSL2, GigE 


© Dual-band concurrent : 
802.11ac 


802.11n 
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Broadband Con- LAN LAN Managed Managed Wi-Fi Wi-Fi Signal IPv6 IPTV 
nection ports Device Firewall Monitor Ready 
Discovery 


SR350NE: Ethernet FE ; : 802.11n 


ADSL2+ 


For more information, contact SmartRG Support. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Q&A 


Q: Why are all the indicators off? 


A: Check the following: 


m The connection between the power adapter and the power socket. 
m The status of the power switch. 


Q: Why is the LAN indicator off? 


A: Check the following: 


m The connection between the ADSL gateway and your computer, hub, or switch. 
m The running status of your PC, hub, or switch. 


Q: Why is the DSL indicator off? 


A: Check the connection between the “DSL” port of gateway and the wall jack. 


Q: Why does Internet access fail while the DSL indicator is on? 


A: Check whether the VPI, VCI, user name, and password are correctly entered. 


Q: Why can't | access the web configuration page of the DSL gateway? 


A: Choose Start > Run from the desktop, and ping 192.168.1.1 (IP address of the DSL gateway). If the DSL gateway is not reachable, 
check the type of the network cable, the connection between the DSL gateway and the PC, and the TCP/IP configuration of the PC. 


Q: How can | reload the default settings after anincorrect configuration? 


A: To restore the factory default settings, turn on the device, and press the reset button for about 1 second, and then release it. The 
default IP address and the subnet mask of the DSL gateway are 192.168.1.1 and 255.255.255.0, respectively. 


m User/password of super user: admin/admin 
m User/password of common user: user/user 


REVISION HISTORY 
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DATE CHANGES 


‘6/28/2016 : Update FCC information; no substantive changes to content. 
Added information about SR512nm gateway (MoCA feature) and the SR515ac gateway. 


Updated screen captures and related descriptions. 


Further standardized wording & formatting. 


: 6/20/2015 : Updated behavior description for the reset button for FW v2.5.0.7 
Clarified WLAN button operation with press and hold durations 
Expanded the field definitions for xDSL Statistics page 
Expanded the definition for the MTU Size field added to the PPP Usernam and Password 
page 
Added section for Access Control (new feature in FW v2.5.0.7) 


Corrected the table content for the fields seen on the NAT page found in the IPOE WAN 
interface workflow 


Miscellaneous formatting and content corrections 


‘ ‘ Implemented image compression to reduce .pdf file size 
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3.3 1/28/2015 ` e Cosmetic enhancements. 
Replaced page shots with new UI color scheme and logos. 
Expanded coverage of Advanced Setup > WAN Service 
General edit 
Visual overhaul. New colors, logo and layout 
Added missing sections for Ethernet Config and LAN 
Expanded chapters for Management Server and STUN 


30: 6/26/2014 : Complete re-write with new layout 


Authored complete field-by-field descriptions for each page 
Complete compendium of page-shots for each feature 


Migrated use cases to on-line knowledge base. (See the SmartRG Customer Portal.) 
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